Overview

overview

8

Static

static

3

VoiceChang...8).exe

windows10-2004-x64

4

VoiceChang...8).exe

windows11-ltsc_2024-x64

4

$8/APOConfig.exe

windows10-2004-x64

5

$8/APOConfig.exe

windows11-ltsc_2024-x64

5

$8/AudioChanger.exe

windows10-2004-x64

1

$8/AudioChanger.exe

windows11-ltsc_2024-x64

1

$8/Clownfi...er.exe

windows10-2004-x64

5

$8/Clownfi...er.exe

windows11-ltsc_2024-x64

5

$8/ClownfshAPO64.dll

windows10-2004-x64

5

$8/ClownfshAPO64.dll

windows11-ltsc_2024-x64

6

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...st.dll

windows10-2004-x64

3

$PLUGINSDI...st.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    521s
  • max time network
    573s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/07/2026, 01:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    $8/ClownfshAPO64.dll
  • Size 353KB
  • Sample260708-byeekshy7k
  • SHA256 0ee6fb51ae47a7f8149b16a44cc0c257a9c777227c8052e51ef1ab3356d9bc5f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwarediscoverypersistenceprivilege_escalationransomwarespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops desktop.ini file(s) 3 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Drops file in Windows directory 32 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 52 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\$8\ClownfshAPO64.dll
    1⤵
    • Modifies registry class
    PID:5556
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:5380
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Drops desktop.ini file(s)
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:5168
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        3⤵
        • Drops file in Windows directory
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Modifies registry class
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:4268
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x300,0x7ffd8253c188,0x7ffd8253c194,0x7ffd8253c1a0
          4⤵
            PID:2956
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,527498868222985068,16490757291488067853,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:11
            4⤵
            • System Time Discovery
            PID:4672
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1968,i,17495294197477941281,1102978875946213860,262144 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:2
            4⤵
              PID:4920
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,14555567413543759789,2204474449276152019,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:13
              4⤵
                PID:1796
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,2804086485976445213,13257310031198944625,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
                4⤵
                  PID:1944
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,9142810540740808935,2546398642209335866,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:1
                  4⤵
                    PID:3376
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4296,i,2997791279280344223,12289947770394956598,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1
                    4⤵
                      PID:680
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,8447657056657921747,3400641747392358366,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:9
                      4⤵
                        PID:5068
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,4416957166579256054,5712880444129033501,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:14
                        4⤵
                          PID:3132
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,4859474028800309141,5305127000619767729,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
                          4⤵
                            PID:4812
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,327997106725429926,7999487136477917317,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
                            4⤵
                              PID:2768
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,10435699930898341012,14112577219796209105,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
                              4⤵
                                PID:5004
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,10435699930898341012,14112577219796209105,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
                                4⤵
                                  PID:3796
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,17992986878577573566,16743412398497348898,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:14
                                  4⤵
                                    PID:1856
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6648,i,7342943936145859894,14383858828646489883,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:14
                                    4⤵
                                      PID:1048
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6720,i,17100483302848135446,5673137750128903355,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:14
                                      4⤵
                                        PID:2948
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4816,i,3870078993758064047,11342450697637403493,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:1
                                        4⤵
                                          PID:2760
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6908,i,15573878664054699182,4333388599873859361,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:1
                                          4⤵
                                            PID:4704
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5020,i,11336062751070914436,3271094064428293182,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:1
                                            4⤵
                                              PID:5300
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7356,i,14908836845177224719,15093328466106005617,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:1
                                              4⤵
                                                PID:4984
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7264,i,18288044538726076156,5124958880266149423,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:1
                                                4⤵
                                                  PID:928
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7456,i,18098254908967741715,15223600405958194664,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:14
                                                  4⤵
                                                    PID:4004
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7420,i,6472565788515921911,4136931742304431458,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:12
                                                    4⤵
                                                      PID:5172
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1280,i,6268935637050491992,16059487048461754883,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=1292 /prefetch:14
                                                      4⤵
                                                        PID:5624
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1404,i,1131035414401923766,17062714781979511962,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8100 /prefetch:14
                                                        4⤵
                                                          PID:3436
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1400,i,12030218343842411223,569950298276454183,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8064 /prefetch:14
                                                          4⤵
                                                            PID:4248
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5348,i,5667404578461106250,4550035404645195798,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8064 /prefetch:1
                                                            4⤵
                                                              PID:3472
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=3656,i,9490080919286646867,14092645025378763656,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=1284 /prefetch:1
                                                              4⤵
                                                                PID:1896
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7948,i,988150927934667596,5196087599272109074,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=7976 /prefetch:1
                                                                4⤵
                                                                  PID:3208
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=3760,i,5916353929668140940,1796548389866182435,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:1
                                                                  4⤵
                                                                    PID:5488
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7468,i,5406508778761072022,18020626321930457198,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:14
                                                                    4⤵
                                                                      PID:5232
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8352,i,11865058583451579815,17933905536112582247,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8388 /prefetch:1
                                                                      4⤵
                                                                        PID:4040
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8656,i,3850484756974025250,12771853523959557856,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8668 /prefetch:1
                                                                        4⤵
                                                                          PID:4568
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8344,i,17546198833677931567,2528496829416561819,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8408 /prefetch:1
                                                                          4⤵
                                                                            PID:5132
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3920,i,5290063010815051509,5218870277387017792,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=7968 /prefetch:14
                                                                            4⤵
                                                                              PID:1108
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8092,i,11509102114307895416,16998670535034252701,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8528 /prefetch:14
                                                                              4⤵
                                                                                PID:2612
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8064,i,9763259363483520976,13278557973199028419,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8112 /prefetch:1
                                                                                4⤵
                                                                                  PID:4820
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=3976,i,11951368961929481114,16389568118772358400,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=3996 /prefetch:1
                                                                                  4⤵
                                                                                    PID:2980
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8640,i,5220908259406495607,15161729193472126402,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
                                                                                    4⤵
                                                                                      PID:6128
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=7932,i,7834892794532142779,18157449111615668917,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8980 /prefetch:1
                                                                                      4⤵
                                                                                        PID:3296
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=3724,i,3747540632300496040,10408548657328387495,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:1
                                                                                        4⤵
                                                                                          PID:3024
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9240,i,11308800558904103318,800274673660675784,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=9276 /prefetch:1
                                                                                          4⤵
                                                                                            PID:5300
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9540,i,15915819198328285857,2969309855669439427,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=9480 /prefetch:1
                                                                                            4⤵
                                                                                              PID:6236
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9416,i,17652618292342145362,7113009776352892347,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=9276 /prefetch:14
                                                                                              4⤵
                                                                                                PID:6988
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7376,i,13990315161447935927,351539600344653775,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8504 /prefetch:14
                                                                                                4⤵
                                                                                                  PID:5564
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8220,i,1159619709462136707,1059711854204798236,262144 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8500 /prefetch:10
                                                                                                  4⤵
                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                  PID:6316
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8516,i,5327032081600082088,4642064009431898445,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8492 /prefetch:14
                                                                                                  4⤵
                                                                                                    PID:4924
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8516,i,16660386602457086694,16312068613082274460,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8512 /prefetch:1
                                                                                                    4⤵
                                                                                                      PID:3320
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8612,i,1045690510361804727,12105847218148944790,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:1
                                                                                                      4⤵
                                                                                                        PID:2424
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9812,i,5784339297979724864,16420829746769494627,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
                                                                                                        4⤵
                                                                                                          PID:6328
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9916,i,14524041684113327485,5748683808656011717,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:1
                                                                                                          4⤵
                                                                                                            PID:2328
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8916,i,105375111661782493,1604542618691194441,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=9936 /prefetch:1
                                                                                                            4⤵
                                                                                                              PID:6604
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=10024,i,12697003252607000743,770636153039418065,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10016 /prefetch:1
                                                                                                              4⤵
                                                                                                                PID:6284
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=10020,i,18194079134454912055,9869270759047877724,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:1
                                                                                                                4⤵
                                                                                                                  PID:7048
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=10288,i,18273495570767416816,6799876028490633857,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10304 /prefetch:1
                                                                                                                  4⤵
                                                                                                                    PID:4648
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10508,i,7897224387388923839,11409909152988293985,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10480 /prefetch:1
                                                                                                                    4⤵
                                                                                                                      PID:3496
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9276,i,16077370279211301398,15117580744358202965,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8872 /prefetch:14
                                                                                                                      4⤵
                                                                                                                        PID:5944
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10016,i,8863220238264952967,333181897400527252,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=9696 /prefetch:1
                                                                                                                        4⤵
                                                                                                                          PID:5720
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10352,i,6770725049352640840,16843350455914303276,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10364 /prefetch:14
                                                                                                                          4⤵
                                                                                                                            PID:6680
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,5126762119357097298,4217381559427008334,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10564 /prefetch:14
                                                                                                                            4⤵
                                                                                                                              PID:7128
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10548,i,13632319654159974072,8692645606893853140,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10600 /prefetch:14
                                                                                                                              4⤵
                                                                                                                                PID:6088
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10304,i,6924316594760771581,17418503485741692531,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10364 /prefetch:14
                                                                                                                                4⤵
                                                                                                                                  PID:2452
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10316,i,4933755390800962612,11782877919673559831,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=9484 /prefetch:14
                                                                                                                                  4⤵
                                                                                                                                    PID:6240
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10440,i,2545515347098583360,15861619528847272777,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=9472 /prefetch:14
                                                                                                                                    4⤵
                                                                                                                                      PID:7008
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10232,i,585370204256139026,6238049693639242317,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10556 /prefetch:14
                                                                                                                                      4⤵
                                                                                                                                        PID:6296
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10048,i,2223395218750889462,17170761593454882634,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:14
                                                                                                                                        4⤵
                                                                                                                                          PID:3048
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,248903694187600866,7302121660707437728,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
                                                                                                                                          4⤵
                                                                                                                                            PID:2240
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=9276,i,10617884293376020527,3363284599698615268,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=9972 /prefetch:1
                                                                                                                                            4⤵
                                                                                                                                              PID:2036
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=9896,i,6296583036580130072,14270400936948447249,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10024 /prefetch:1
                                                                                                                                              4⤵
                                                                                                                                                PID:3328
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=10176,i,17499955855987237410,4753842224874295630,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10556 /prefetch:1
                                                                                                                                                4⤵
                                                                                                                                                  PID:2204
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=8412,i,4358530584261567776,4041146279675130887,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10516 /prefetch:1
                                                                                                                                                  4⤵
                                                                                                                                                    PID:6188
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10920,i,15455261461547713870,3699094363847324553,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10884 /prefetch:14
                                                                                                                                                    4⤵
                                                                                                                                                      PID:7008
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=7676,i,3717953672513852862,2351378846266611513,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10580 /prefetch:1
                                                                                                                                                      4⤵
                                                                                                                                                        PID:1428
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=9880,i,12863315558031700618,7783861356327238985,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=9340 /prefetch:1
                                                                                                                                                        4⤵
                                                                                                                                                          PID:912
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8908,i,8745429740273806507,3580880405932721132,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10168 /prefetch:14
                                                                                                                                                          4⤵
                                                                                                                                                            PID:6280
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=10120,i,14195496914506434140,7671559867519897927,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8928 /prefetch:1
                                                                                                                                                            4⤵
                                                                                                                                                              PID:7128
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=10372,i,3203257004664413447,2207948102544270039,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8896 /prefetch:1
                                                                                                                                                              4⤵
                                                                                                                                                                PID:6268
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=11096,i,5020933358064903928,9717990538201559955,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=11108 /prefetch:1
                                                                                                                                                                4⤵
                                                                                                                                                                  PID:7100
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=10064,i,17046920068067426741,18177972090497898466,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=11180 /prefetch:1
                                                                                                                                                                  4⤵
                                                                                                                                                                    PID:2756
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=10384,i,10083795387632883957,5580940747188631240,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10748 /prefetch:1
                                                                                                                                                                    4⤵
                                                                                                                                                                      PID:6016
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=11100,i,18387601028048090725,16668717906461153303,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:1
                                                                                                                                                                      4⤵
                                                                                                                                                                        PID:4032
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=9276,i,12338627865537301630,10756787714731685557,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10352 /prefetch:1
                                                                                                                                                                        4⤵
                                                                                                                                                                          PID:5348
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=9328,i,3996597755922943130,11834903399986296795,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:1
                                                                                                                                                                          4⤵
                                                                                                                                                                            PID:2524
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=9796,i,156233705467827333,14745318124554927838,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=9260 /prefetch:1
                                                                                                                                                                            4⤵
                                                                                                                                                                              PID:6968
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=10156,i,14934931644718159612,2421131011629000649,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
                                                                                                                                                                              4⤵
                                                                                                                                                                                PID:6684
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=9248,i,8064006078720558202,17026999685526261856,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=8860 /prefetch:1
                                                                                                                                                                                4⤵
                                                                                                                                                                                  PID:3816
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8220,i,1785073339288682304,8293149691011531251,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=11108 /prefetch:14
                                                                                                                                                                                  4⤵
                                                                                                                                                                                    PID:4828
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=11144,i,2317988955105968242,2332982181170540390,2097152 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=1484 /prefetch:1
                                                                                                                                                                                    4⤵
                                                                                                                                                                                      PID:5896
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8928,i,13671899409110801029,8253324635761579237,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=10904 /prefetch:14
                                                                                                                                                                                      4⤵
                                                                                                                                                                                        PID:2644
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10724,i,10113352069987769486,14729143056588242344,524288 --field-trial-handle=2408,i,11326235275427708659,9854884800975082212,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:14
                                                                                                                                                                                        4⤵
                                                                                                                                                                                          PID:5488
                                                                                                                                                                                      • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                                                                                                                                                                        "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\f425c203-ab3b-4a78-820c-26541ebc94c7_offline-lunar-1.8.9.zip.4c7\lunar-1.8.9\lunar-1.8.9.jar"
                                                                                                                                                                                        3⤵
                                                                                                                                                                                          PID:7128
                                                                                                                                                                                        • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                                                                                                                                                                          "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\566c2805-e8f6-4fff-b99c-2516b2cb5d98_lunar.7z.d98\lunar\lunar.jar"
                                                                                                                                                                                          3⤵
                                                                                                                                                                                            PID:6772
                                                                                                                                                                                          • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                                                                                                                                                                            "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\4df5f946-7ca1-4960-94cc-3aeded26378a_Offline Lunar 1.8.9.rar.78a\Offline Lunar 1.8.9\Offline Lunar 1.8.9.jar"
                                                                                                                                                                                            3⤵
                                                                                                                                                                                              PID:4012
                                                                                                                                                                                        • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                                          "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                                          1⤵
                                                                                                                                                                                          • Modifies registry class
                                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                          PID:4464
                                                                                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                          1⤵
                                                                                                                                                                                          • Modifies registry class
                                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                          PID:3380
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                          1⤵
                                                                                                                                                                                            PID:1300
                                                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                                                            C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                                                            1⤵
                                                                                                                                                                                              PID:4768
                                                                                                                                                                                            • C:\Windows\system32\svchost.exe
                                                                                                                                                                                              C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                                                                                              1⤵
                                                                                                                                                                                                PID:3952
                                                                                                                                                                                              • C:\Windows\System32\rundll32.exe
                                                                                                                                                                                                C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                                                                1⤵
                                                                                                                                                                                                  PID:6464

                                                                                                                                                                                                Network

                                                                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                      Replay Monitor

                                                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                                                      Downloads

                                                                                                                                                                                                      366c7bd7-73fa-4b4a-a148-9e05f8f0f598.tmp
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\366c7bd7-73fa-4b4a-a148-9e05f8f0f598.tmp
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 186bee6cef3cfe287cec5dedf14d561c4f99e523895027a81415fa4e991ac6f8
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      settings.dat
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                                      • SHA256 7f42eed0dfd57f190ddc3525921a1e41725f50ed20b5484d44be8de4cdd83ce3
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      settings.dat
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                                      • SHA256 f2f36159b1a73a0ea0e59f51f1f373932375016885fcf17933887e7d1b2c3016
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      settings.dat
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                      • Size 280B
                                                                                                                                                                                                      • SHA256 99348710dfa24f06e3cc9e5d66d99b450d2606932193b821d1cccbb1b0382494
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      LOG.old
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                      • Size 331B
                                                                                                                                                                                                      • SHA256 ec4201d051743806bb5f141ccd6d8cba50972725db6e64f8a256978c4775b7fd
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000ad
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                                                                                                                                                                                      • Size 42KB
                                                                                                                                                                                                      • SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000ae
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
                                                                                                                                                                                                      • Size 23KB
                                                                                                                                                                                                      • SHA256 114d9d310b516b60a401248cc3a322c84699e89074a84b18802dda1b5f2bd31a
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000b6
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                                                                                                                                                                                      • Size 40KB
                                                                                                                                                                                                      • SHA256 7cb4281a0ccc84cc18617842c639fc66541cbef94a9dd245c754700210b4fcec
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000b8
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
                                                                                                                                                                                                      • Size 20KB
                                                                                                                                                                                                      • SHA256 2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000c4
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
                                                                                                                                                                                                      • Size 30KB
                                                                                                                                                                                                      • SHA256 dcc8824a4996f189ea5c85d33d2a09e2ec6f936614e494f1f5c665bae2b04ac0
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000c5
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c5
                                                                                                                                                                                                      • Size 122KB
                                                                                                                                                                                                      • SHA256 5976ceb924cd544f2d0481506bc6a475dbf3f75893c7fffb130176c39284d973
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000c6
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
                                                                                                                                                                                                      • Size 25KB
                                                                                                                                                                                                      • SHA256 1c45808d47089756c1d3f2785efdee40a62eb122ce570033c690c27335235b67
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000c7
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
                                                                                                                                                                                                      • Size 138KB
                                                                                                                                                                                                      • SHA256 d29cc4d1deb803b392cf72e350eaaa141acac8063f8c749b5b4f68de9e30c7cb
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000c8
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c8
                                                                                                                                                                                                      • Size 111KB
                                                                                                                                                                                                      • SHA256 29f7f2ce8481930597a9593d1010a386f7cb6c3840a592e61d835038d4dd07b1
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000c9
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
                                                                                                                                                                                                      • Size 21KB
                                                                                                                                                                                                      • SHA256 fd91362b7111a0dcc85ef6bd9bc776881c7428f8631d5a32725711dce678bff9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000ca
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
                                                                                                                                                                                                      • Size 46KB
                                                                                                                                                                                                      • SHA256 9fa480e420b8ba38943eadbe3423ca0ebde1825c450247e468b44d350bc27e05
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000cb
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
                                                                                                                                                                                                      • Size 180KB
                                                                                                                                                                                                      • SHA256 cadd90db725076932c64f1d0781a6b8b4800a13383a1f87525b7a20f482f4e91
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000cc
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
                                                                                                                                                                                                      • Size 109KB
                                                                                                                                                                                                      • SHA256 68711c028a533c5d966d84b59325d73d9d7b407c8b096e3f480b839768f9b853
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000cd
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                                                                                                                                                                                      • Size 103KB
                                                                                                                                                                                                      • SHA256 2f1518c3d98f4294f6c2639e9f1de91bc3c933e8f3756d6adcaefefbe44d15ec
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000ce
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                                                                                                                                                                                      • Size 100KB
                                                                                                                                                                                                      • SHA256 c59988afc4099abe99a3781618c8bc975a0f5c6ca326ef5c851789653ebd8d94
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000cf
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
                                                                                                                                                                                                      • Size 66KB
                                                                                                                                                                                                      • SHA256 a6abb17339820c7790548f550e19a22652a91a95a8493b36372a74c3377c2d14
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000d2
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
                                                                                                                                                                                                      • Size 78KB
                                                                                                                                                                                                      • SHA256 5b9fbe0eef72b974ce81ff372ccaa58d86bf677085ad2512086e4f917e814520
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000d3
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
                                                                                                                                                                                                      • Size 34KB
                                                                                                                                                                                                      • SHA256 20932fec0bbda6310c8b59b9c740d3097461fcf84d559a33227d3c60cd3d4bd7
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000d4
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
                                                                                                                                                                                                      • Size 71KB
                                                                                                                                                                                                      • SHA256 7efe9b51d3d54591b6852fb72f0363f2f3dced1f81cfd9b298239d23e2c80f79
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000d6
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d6
                                                                                                                                                                                                      • Size 98KB
                                                                                                                                                                                                      • SHA256 dc43240e438b237076ef2e4c26d5a5861713b564de4c10d68215eb713dfaadc9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000d7
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d7
                                                                                                                                                                                                      • Size 29KB
                                                                                                                                                                                                      • SHA256 22a67b9e4a25c991e3662986ca5c1ab2032b565359cb030f23585be6f5f20e7f
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000d8
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d8
                                                                                                                                                                                                      • Size 191KB
                                                                                                                                                                                                      • SHA256 7362984c67deb422b7a1129d64ff82706842d0a669cd63367c8c34e2252595e1
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000da
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
                                                                                                                                                                                                      • Size 33KB
                                                                                                                                                                                                      • SHA256 37db35bfdc84549d8ca6ee6f2d304b07a1495a90ebd9aacac96dc1aa4e3b0083
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000e4
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e4
                                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                                      • SHA256 c879e20b7fd8e872a394d588a3363a46561ca1bd1bdaabee0d213d4f429a4ed9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000e6
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e6
                                                                                                                                                                                                      • Size 21KB
                                                                                                                                                                                                      • SHA256 13753756eab1db0b2faee0c9e28a8c714420894e44f84e5aaa3add52038e1558
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000e7
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e7
                                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                                      • SHA256 7476553a0c442bad7a88d2fddaa49acb67819516d4db4db372cff48112cd74e6
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0000e8
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e8
                                                                                                                                                                                                      • Size 45KB
                                                                                                                                                                                                      • SHA256 85369a1cf6e7ff57fe2587323c440ed24488b5ed26d82ba0cd52c86c42eec4a7
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_000145
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000145
                                                                                                                                                                                                      • Size 20KB
                                                                                                                                                                                                      • SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f_0001b0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001b0
                                                                                                                                                                                                      • Size 16KB
                                                                                                                                                                                                      • SHA256 ba76d9ba3ad29be3691a7f5bb292d7aa1d54357fc8a4c22af0f05989f007d46d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      069a800b50bece7c_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\069a800b50bece7c_0
                                                                                                                                                                                                      • Size 278B
                                                                                                                                                                                                      • SHA256 3fe047b6c6c895ef62ffa8586173254389838ebc37527cbc893dfa546b19eed9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      0f3e69621a25d731_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0f3e69621a25d731_0
                                                                                                                                                                                                      • Size 15KB
                                                                                                                                                                                                      • SHA256 1cbd12fd6f1f3246df4dc122223600ad06e2c64d750d0808194813a39ca3d53b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      940c429f3b405fb5_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\940c429f3b405fb5_0
                                                                                                                                                                                                      • Size 276B
                                                                                                                                                                                                      • SHA256 8df5e16343b97f3a3da0a88fa9e134a6643c3a659d53fe011b0f8a283ad19ede
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      9e525e488a29dbab_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9e525e488a29dbab_0
                                                                                                                                                                                                      • Size 273B
                                                                                                                                                                                                      • SHA256 ef34e556b9c590ff53973e7c162b56cae530120f635078b3528e07702de0f82c
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      dca91dbd0490bc03_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dca91dbd0490bc03_0
                                                                                                                                                                                                      • Size 268B
                                                                                                                                                                                                      • SHA256 11e1717960077b03dd98c36e8a40018448d0bc36d88616b03332bfe8a3e34c25
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      temp-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                      • Size 11KB
                                                                                                                                                                                                      • SHA256 5f24a58ab481ad91f3cb91e39ca302b90f476a4a8aad1786f4e4701f2e140730
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                      • Size 7KB
                                                                                                                                                                                                      • SHA256 b9ddbe6c6894bee24f9c9c842cce8db0fa4276c54ce1ba8fed4ef95307aeb7e8
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                      • Size 9KB
                                                                                                                                                                                                      • SHA256 f0190a3563c2b2a71e8249b1ee5a0e76cb219623acf6a6dda654825b77653333
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                      • Size 8KB
                                                                                                                                                                                                      • SHA256 657efea3aa9b1e9c59d885cf6c0c4a6109a2821b039cb047be99ccfffb899498
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5bac59.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5bac59.TMP
                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                      • SHA256 7a410486c4f36373e23e0e77241eed0369afd6657459f34bb4790e1696afca2f
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      SiteList-Enterprise.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Edge Profile.ico
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                      • Size 70KB
                                                                                                                                                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      000003.log
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                                                                      • Size 78KB
                                                                                                                                                                                                      • SHA256 4ec6a93a7c47ec446358eac6bfdc79250429f70a073d28b81f54e254884e0dcc
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      CURRENT
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
                                                                                                                                                                                                      • Size 16B
                                                                                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      LOG
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                                                                                                                      • Size 353B
                                                                                                                                                                                                      • SHA256 e70d0b9305447e5bd993f1e572fb3001b7543c8dd1b9506636adcd3139854ed2
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      MANIFEST-000001
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                      • Size 23B
                                                                                                                                                                                                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                      • Size 24KB
                                                                                                                                                                                                      • SHA256 38a780b27f9cb362147fa38932b83ab9a22530e9874720452e02ee5f6f3817e3
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                      • Size 48KB
                                                                                                                                                                                                      • SHA256 a7a1f65ffd55d13a2c170e278bdb12e5b375ed78adf791bd3ff876e43aa770c7
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Network Persistent State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                      • Size 68KB
                                                                                                                                                                                                      • SHA256 07f118e48c136c07cba56a52d1c90aadc570ec8257d528b85c8862710d9df584
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      SCT Auditing Pending Reports
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                      • Size 2B
                                                                                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Sdch Dictionaries
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                      • Size 211B
                                                                                                                                                                                                      • SHA256 cbfb16c7960133516d21101646d88aedc9239869f2e6d8d504fced1834739e66
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Sdch Dictionaries
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                      • Size 40B
                                                                                                                                                                                                      • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 17KB
                                                                                                                                                                                                      • SHA256 c64a57fbc38ea6577497aec6b734f7afbdf10d74eec7e1e9e5a333c736d06bad
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 20KB
                                                                                                                                                                                                      • SHA256 bf36bf3f7409889d2efffd811f85a367ebed38ada3223a3fd48be9a5053b86cd
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 31KB
                                                                                                                                                                                                      • SHA256 3750eb73dbc49eb0b158851bb8a8c631350c80024b0b099e64d38a1cc40ed409
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 28KB
                                                                                                                                                                                                      • SHA256 035f1181ceb4fef4fba2e56fd2b61dbebeecfe76eb7b9fe3175c1a8c17ea4f80
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 31KB
                                                                                                                                                                                                      • SHA256 0b8a525796529035cf9abd9a9d1410dede51e8f28ff8cd6dc8c3119a43e3b750
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                                      • SHA256 936883f7adde5b34c5251aa03daaa34a5064f4aace073539862428734bb490b8
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 27KB
                                                                                                                                                                                                      • SHA256 1a6cb41b5e3956687db7f633811d65f6582db53056856831912868f0dea16386
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                      • Size 17KB
                                                                                                                                                                                                      • SHA256 a0c9cae779c0352e25789c1ec38200b9f8cae0c79e70c2350186d4864da61840
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Secure Preferences
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                      • Size 32KB
                                                                                                                                                                                                      • SHA256 76b1d09080fd4169cf5fc73dfe00cec67a72ea2dc8e6057a9ee590eb04077d0a
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      916922e223209720_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\235f5829-46d1-447b-ac82-32810f17490f\916922e223209720_0
                                                                                                                                                                                                      • Size 28KB
                                                                                                                                                                                                      • SHA256 67734fcb4df94f64aad4299f38cfc34861025b1b662187255d530eff57392c78
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      916922e223209720_1
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\235f5829-46d1-447b-ac82-32810f17490f\916922e223209720_1
                                                                                                                                                                                                      • Size 56KB
                                                                                                                                                                                                      • SHA256 9d29525e59b4c0957b0a79d83d2786896166290911fc6924ef8188a13c2922da
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      c8172aa77bb157a0_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\235f5829-46d1-447b-ac82-32810f17490f\c8172aa77bb157a0_0
                                                                                                                                                                                                      • Size 509KB
                                                                                                                                                                                                      • SHA256 4640265aaebcf24690177c868d12d55ce9042ec2fe6a5e302b16cf8594d02803
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\235f5829-46d1-447b-ac82-32810f17490f\index-dir\the-real-index
                                                                                                                                                                                                      • Size 576B
                                                                                                                                                                                                      • SHA256 a0388e835d495106fc0b804822eb22b0f38c1c10e86b6e59310da61a3e4c0bee
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5b04cf.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\235f5829-46d1-447b-ac82-32810f17490f\index-dir\the-real-index~RFe5b04cf.TMP
                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                      • SHA256 5a3f4c517405441598219c05613902143d1eacd2b09686ae09ce4de24c9bd5d1
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c2b827f0-596e-47f7-817b-0961560d0ca6\index
                                                                                                                                                                                                      • Size 24B
                                                                                                                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cb97ccf1-32fe-434c-a320-284b34671ee9\index-dir\the-real-index
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 c95db51e6cfee30fe45fd2f4ee3716eb910d4e0520a6cda247407581c23da938
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cb97ccf1-32fe-434c-a320-284b34671ee9\index-dir\the-real-index
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 1ff175de91de34551d22ebac45100d3bd4033d58a1271034d7f10ea9da243097
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cb97ccf1-32fe-434c-a320-284b34671ee9\index-dir\the-real-index
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 f43e27527ece71cf660e51b1436fc1c4de47723871183a2feb55c169c6674678
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cb97ccf1-32fe-434c-a320-284b34671ee9\index-dir\the-real-index
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 509f6d4f138ec9a95c4e3dc86ce0c0864d1b72cd7a020eba20b1eeb1e8c14294
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cb97ccf1-32fe-434c-a320-284b34671ee9\index-dir\the-real-index
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 27c9eb6a90cfcc17834d23ff5e2c99c30fe278dcfcc734454573f2290ea4bf24
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5b2db4.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cb97ccf1-32fe-434c-a320-284b34671ee9\index-dir\the-real-index~RFe5b2db4.TMP
                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                      • SHA256 001807a0c5e3f63acf1bebbcea09db4d6ef75b8ffb989ab908a206724459ea3f
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 467B
                                                                                                                                                                                                      • SHA256 9c0e2263bdaba4dfd0e1fb121548a39b770c6ed3352ef557d58e27d977c7680b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 383B
                                                                                                                                                                                                      • SHA256 7c89f6c2c08ee3fc67ee1db54da301df1bb75b16a0ff586a7334a17bf5493f90
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 390B
                                                                                                                                                                                                      • SHA256 78f2075b78ef8239b08d66b39c4a1eb6e4d4bf0da5a79dd9c6dc316b19d7fa26
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 221B
                                                                                                                                                                                                      • SHA256 bd7196186d30bbcc6d7a04c6048d85486f55d3e98a4b392f5b2cd3932289970f
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 243B
                                                                                                                                                                                                      • SHA256 bc2a665a71a498c97b8e138954e0cb72e27fc523370583404d0fc0417c1a3089
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 467B
                                                                                                                                                                                                      • SHA256 bf15f293ada87ff3a5d2cecedeeedeed764251ddb58e0ecb7e1ce8373481134c
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 130B
                                                                                                                                                                                                      • SHA256 95d25782f6677bd5cc421d37dc54c8e37551356c27ad45006d7d2f62e4631150
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 383B
                                                                                                                                                                                                      • SHA256 7db0f000ae146fbd22b0b856e0940f8c1a2436c6d19b9f19e3ce8954e53a8cfe
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 383B
                                                                                                                                                                                                      • SHA256 6f3c7eb864c2b3da625f09ae23e848e7dce780c3df6205ee7820ccc69e9612d6
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 383B
                                                                                                                                                                                                      • SHA256 f121333f8b05bd6a9cf8238a4d4896c6b61ef8b31a3e009ef9d1f1932d3bf55b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                                                                      • Size 383B
                                                                                                                                                                                                      • SHA256 fd27ec5daedc22d2d34ee1c3d641143240902493de8fe534a4ec0e63148e6e39
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt~RFe5aab55.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5aab55.TMP
                                                                                                                                                                                                      • Size 137B
                                                                                                                                                                                                      • SHA256 6d64fbd5e54aae09fc6c05156f79d4b27315f9b71e1046df8f0fc9a785a2dd67
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1623d364-a73a-43f3-9ad1-700f03102ed4\index-dir\the-real-index
                                                                                                                                                                                                      • Size 360B
                                                                                                                                                                                                      • SHA256 7345add774895c905c72c23eeee695f3b4b8d9252c88b2e3a78413ad7140ee07
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1623d364-a73a-43f3-9ad1-700f03102ed4\index-dir\the-real-index
                                                                                                                                                                                                      • Size 2KB
                                                                                                                                                                                                      • SHA256 0aa3501504e85ce4dbc07ff2ce793f8d2554448f1137cd87b7824b4821ebdce9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5a4b52.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1623d364-a73a-43f3-9ad1-700f03102ed4\index-dir\the-real-index~RFe5a4b52.TMP
                                                                                                                                                                                                      • Size 360B
                                                                                                                                                                                                      • SHA256 b6682abd0de4d09aa8530e65508495fc273bf963773d72852f6685f041c10ba3
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a3b35925-721d-48b3-8ff2-4c66bd7164c3\index-dir\the-real-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 4a71df0bb3ccbab11fec5bc55509588d0a7d6e0266d3381efc8ba31b0ae9dc0e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5a9f8d.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a3b35925-721d-48b3-8ff2-4c66bd7164c3\index-dir\the-real-index~RFe5a9f8d.TMP
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 0614ad12a8a84f4d6bc1550c808e96350b942c600e76b4c289723db355dc6367
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      index.txt
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                      • Size 371B
                                                                                                                                                                                                      • SHA256 bb159fd0a876e4dfb7fcafc4016eb6fe320ca7ace382fe9f3752997b0439e2c4
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                      • Size 120B
                                                                                                                                                                                                      • SHA256 beb19f9d249b662802bfb092d92d651aa8ec98d883c4c70e54e418511227d36e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 91ff2a604ee42354194f3f98118d3c21e36dfe692ea80e0aae305f8aa339090a
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      the-real-index~RFe5a9f7d.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a9f7d.TMP
                                                                                                                                                                                                      • Size 48B
                                                                                                                                                                                                      • SHA256 78e2029b3f9a34608b8470eccdd1f91afe0d39c86bec69e094cca18e9d6dacbc
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      da1992b8f34f3c25_0
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\da1992b8f34f3c25_0
                                                                                                                                                                                                      • Size 63KB
                                                                                                                                                                                                      • SHA256 77badedb6778f6f41ed4a9857c6added06a26275e36baf0d775de18e1a295833
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      temp-index
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                                                                                                                                      • Size 72B
                                                                                                                                                                                                      • SHA256 9a8c49ff35fcb775bfe8563cd93bb2ad55ea036eb6ae5e9d380695c2a1efee48
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      OperationConfig
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                                                                      • Size 22KB
                                                                                                                                                                                                      • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      OperationConfig~RFe5b30c1.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5b30c1.TMP
                                                                                                                                                                                                      • Size 3KB
                                                                                                                                                                                                      • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 35KB
                                                                                                                                                                                                      • SHA256 b82b5250f25b21bfde88f197a3d36c1bb64ef4a369671f721ab649ff964e3ff1
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 35KB
                                                                                                                                                                                                      • SHA256 596b0c82e2987a86c5e1ee50ccb0f976cdbe8c9b5bdeac3f36b59615c305adc0
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 38KB
                                                                                                                                                                                                      • SHA256 a5a4e9c79dc7c3a1d60dc1cc75a7be0c6d1bede59736e9b80934ed6d060a5024
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 38KB
                                                                                                                                                                                                      • SHA256 834dff6c6a8535a86f685c507e188b604647d739c159a949eaa7a9ca78af3d68
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 44KB
                                                                                                                                                                                                      • SHA256 34d1f238baa6bca194881cc69cbc4bee32e12d0f5cd1af17da7a3cf2f62a47bf
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      Local State
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                      • Size 44KB
                                                                                                                                                                                                      • SHA256 d53a1847acc6d3a9e9004d59d2134463a5113b83ed5fc96f7fff8c5a86301a72
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 99162373c86dd6f58e34c844c0d566450dfca76023977d9a18bfdb1d38cb6caf
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 ef5fbfa937308aa830155d633efac146ec328f6a1466f9fcc4024a57f0e3334e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 ab8b2c38aa5802ee4cf748bf2f855b16ec6d1e49fbd90762f4490854dc1630bc
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 2e945ecf2e03930e1b2aa9dbb161e86cce0911ca9e74123e1184182900bed7ff
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 88d2bdc9740c5047b978ea41f2e9295160d75e82b80a638780127199a887d860
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 bfa1e1a826b0154bc84ae1b887dd109f3a21e31efb604a3dd50fd900506c7bca
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 30a7e1687d0b4dd8a16eee84f5c9486ab83f3855e5f22ea65b87012f67447015
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 f97e128c62489d2f291d86e0abb8b216178b3492e7674c13facac2b4d54770df
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 1eb70699ec566e89f0a30a8f392b5b6cfdf920752d2ed5f232a7d24d6578f9cf
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 b229177d3304c1a4babb42e1d9d436c124aea18be54d211544b5cea4278c41ed
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 c24a4db51b0b61efe5971dbbf8e93629c40c68cb971d4cce9b2904a35992879e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 449afb038e0be93384d14c33a032c8a7066f327dcfccec7a5c7b659a9951692a
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 e24dacf0fffdc51b6df012499a206b2ae16cba95810cb7ef1505fcaadbdfcd32
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 2b986e9b428a6817da643e064e41c2d4eedfe3b8b995579adc835809fd5ad762
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 23ccbf7b2dd2d62e890b708b071784b802203f202e0166a39aab3f22c084dcbc
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 deaa51b78b68182f43eb951fefa2a4b57806c968f8cc4fe9c68da2c380486cf3
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      RevisitationBloomfilter~RFe5b0617.TMP
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5b0617.TMP
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 dbf62e3a6d8e01c6a16bac73033f267b7704e9e20739be5daf03333608c6c4ba
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 492B
                                                                                                                                                                                                      • SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 732B
                                                                                                                                                                                                      • SHA256 a5548ca519cf47ecb420c8f1299a8a50517fa463459a704ef2ff17c4db35117a
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 972B
                                                                                                                                                                                                      • SHA256 590065152acec5cf42dffc28eb04749514feaa899eb2ae04edce7d38a148fbda
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                      • SHA256 757c40068c8b44526fedddbae76f4ef49d46e6f99e9c5b6ac7daee04f31c52bc
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 132B
                                                                                                                                                                                                      • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 252B
                                                                                                                                                                                                      • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 852B
                                                                                                                                                                                                      • SHA256 142a7cc7a4933a976aae32a9d04e1758464486092207243f09edbbad51f1d934
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 612B
                                                                                                                                                                                                      • SHA256 98d9b184e4c7220b5aaf7ae412b0c1b3f32e3dc4933afcf852538b8082017b9e
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                      • SHA256 7ae3abeff1a7ac2b396b3e38dc9d2900c37a4fa3623cd6a74cdc34b502978149
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 372B
                                                                                                                                                                                                      • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      metadata.json
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                                                                                                      • Size 13B
                                                                                                                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      f42ac9b9-6d23-4679-b6ff-355494c11ddd.tmp
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f42ac9b9-6d23-4679-b6ff-355494c11ddd.tmp
                                                                                                                                                                                                      • Size 392B
                                                                                                                                                                                                      • SHA256 b03b5933eb1c69dda9a0aba0cad2d42437a84eef3920bb7d8edd1244ce51398e
                                                                                                                                                                                                      • MD5 SHA1 SHA512
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      prep_Activatable Class_Hermes_perf.cache
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                                                                                                                                      • Size 599B
                                                                                                                                                                                                      • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      lunar.jar
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\566c2805-e8f6-4fff-b99c-2516b2cb5d98_lunar.7z.d98\lunar\lunar.jar
                                                                                                                                                                                                      • Size 29.8MB
                                                                                                                                                                                                      • SHA256 bd208382e0f47bd80283a8f7623f7800db9ec39888b341bdedf37fbd42f494c0
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      content_new.js
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4268_685716899\CRX_INSTALL\content_new.js
                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                      • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                      • Size 10KB
                                                                                                                                                                                                      • SHA256 9c1914b3367a50c4ca577c62ee0d7c0737b80bd89d83aad5b79e378c331b66d6
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      lunar.7z
                                                                                                                                                                                                      • Path C:\Users\Admin\Downloads\lunar.7z
                                                                                                                                                                                                      • Size 31.3MB
                                                                                                                                                                                                      • SHA256 17cae76e3eed211facf91abdf61db8d727e48647ef21fd50208b831279ff1309
                                                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      LICENSE
                                                                                                                                                                                                      • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4268_767799092\LICENSE
                                                                                                                                                                                                      • Size 1KB
                                                                                                                                                                                                      • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                      Submit Download

                                                                                                                                                                                                      memory/3380-190-0x000001F753990000-0x000001F753A8F000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/3380-193-0x000001F753990000-0x000001F753A8F000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/3380-2966-0x000001F753990000-0x000001F753A8F000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/4012-4443-0x0000023DDD8A0000-0x0000023DDD8A1000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/4464-2-0x000001C6801E0000-0x000001C6802E0000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/4464-64-0x000001C694600000-0x000001C694620000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/4464-13-0x000001C681D60000-0x000001C681E60000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/4464-12-0x000001C681920000-0x000001C681940000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/4464-1-0x000001C6801E0000-0x000001C6802E0000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/4464-3-0x000001C6801E0000-0x000001C6802E0000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/4464-50-0x000001C681B60000-0x000001C681B80000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/6772-4425-0x00000265B90F0000-0x00000265B90F1000-memory.dmp
                                                                                                                                                                                                      Download

                                                                                                                                                                                                      memory/7128-4375-0x0000021DCD510000-0x0000021DCD511000-memory.dmp
                                                                                                                                                                                                      Download