hxxp://dailymotion[.]com

Analysis

user interaction
yes
max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/07/2026, 09:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://dailymotion.com
Sample260709-lg175agy21

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2388	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280630767146137"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{B6FCBF05-4C45-4996-8C44-0ADDE867C77E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 62 IoCs

pid	Process
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe
456	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 456 wrote to memory of 1448	456	msedge.exe	85
PID 456 wrote to memory of 3104	456	msedge.exe	86
PID 456 wrote to memory of 2388	456	msedge.exe	87
PID 456 wrote to memory of 3104	456	msedge.exe	86
PID 456 wrote to memory of 3104	456	msedge.exe	86
PID 456 wrote to memory of 1388	456	msedge.exe	88
PID 456 wrote to memory of 1388	456	msedge.exe	88
PID 456 wrote to memory of 1460	456	msedge.exe	89
PID 456 wrote to memory of 1460	456	msedge.exe	89
PID 456 wrote to memory of 1460	456	msedge.exe	89
PID 456 wrote to memory of 1676	456	msedge.exe	90
PID 456 wrote to memory of 1676	456	msedge.exe	90
PID 456 wrote to memory of 1676	456	msedge.exe	90
PID 456 wrote to memory of 1296	456	msedge.exe	92
PID 456 wrote to memory of 2312	456	msedge.exe	93
PID 456 wrote to memory of 1296	456	msedge.exe	92
PID 456 wrote to memory of 1296	456	msedge.exe	92
PID 456 wrote to memory of 2312	456	msedge.exe	93
PID 456 wrote to memory of 2312	456	msedge.exe	93
PID 456 wrote to memory of 692	456	msedge.exe	97
PID 456 wrote to memory of 692	456	msedge.exe	97
PID 456 wrote to memory of 692	456	msedge.exe	97
PID 456 wrote to memory of 4884	456	msedge.exe	98
PID 456 wrote to memory of 4036	456	msedge.exe	99
PID 456 wrote to memory of 4884	456	msedge.exe	98
PID 456 wrote to memory of 4036	456	msedge.exe	99
PID 456 wrote to memory of 4848	456	msedge.exe	101
PID 456 wrote to memory of 3148	456	msedge.exe	105
PID 456 wrote to memory of 3148	456	msedge.exe	105
PID 456 wrote to memory of 3148	456	msedge.exe	105
PID 456 wrote to memory of 2732	456	msedge.exe	112
PID 456 wrote to memory of 3320	456	msedge.exe	113
PID 456 wrote to memory of 3892	456	msedge.exe	114
PID 456 wrote to memory of 4000	456	msedge.exe	116
PID 456 wrote to memory of 4000	456	msedge.exe	116
PID 456 wrote to memory of 1548	456	msedge.exe	117
PID 456 wrote to memory of 1548	456	msedge.exe	117
PID 456 wrote to memory of 2524	456	msedge.exe	118
PID 456 wrote to memory of 2524	456	msedge.exe	118
PID 456 wrote to memory of 2524	456	msedge.exe	118
PID 456 wrote to memory of 1472	456	msedge.exe	119
PID 456 wrote to memory of 1472	456	msedge.exe	119
PID 456 wrote to memory of 1472	456	msedge.exe	119
PID 456 wrote to memory of 1236	456	msedge.exe	120
PID 456 wrote to memory of 1236	456	msedge.exe	120
PID 456 wrote to memory of 1236	456	msedge.exe	120
PID 456 wrote to memory of 3528	456	msedge.exe	121
PID 456 wrote to memory of 3528	456	msedge.exe	121
PID 456 wrote to memory of 3528	456	msedge.exe	121
PID 456 wrote to memory of 824	456	msedge.exe	122
PID 456 wrote to memory of 824	456	msedge.exe	122
PID 456 wrote to memory of 824	456	msedge.exe	122
PID 456 wrote to memory of 2288	456	msedge.exe	123
PID 456 wrote to memory of 2288	456	msedge.exe	123
PID 456 wrote to memory of 2288	456	msedge.exe	123
PID 456 wrote to memory of 2304	456	msedge.exe	124
PID 456 wrote to memory of 2304	456	msedge.exe	124
PID 456 wrote to memory of 2304	456	msedge.exe	124
PID 456 wrote to memory of 2444	456	msedge.exe	125
PID 456 wrote to memory of 2444	456	msedge.exe	125
PID 456 wrote to memory of 2444	456	msedge.exe	125
PID 456 wrote to memory of 3052	456	msedge.exe	126
PID 456 wrote to memory of 3052	456	msedge.exe	126
PID 456 wrote to memory of 3052	456	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://dailymotion.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9557ec188,0x7ff9557ec194,0x7ff9557ec1a0
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,4071435066591531324,12512632828126870294,262144 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,17368717371386282100,1123083706645681426,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,3006242089358524488,10031741392133845432,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3396,i,4803629025527220903,18274529918294375359,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,12721134492648390066,14033501010235770946,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,6791861226157339345,13101460990454201176,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,10278861455826354073,13139191888049547492,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5056,i,7883996579703940547,8009888862353135776,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,2134516952235668505,9233311521822340840,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=3740 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3640,i,11507906164162422565,8723619091654533848,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:8
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,11328389625124976128,14561453282423065949,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,11328389625124976128,14561453282423065949,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6204,i,12040173685720124928,2969049875908494424,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,4809921752694063553,4103338519346685988,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4432,i,14690787106826962885,12259322795841179070,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4444,i,7347462091701200054,915010222926114461,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6948,i,8393002737612497111,18025397395765399337,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,5365972490735268174,13233234014777323956,524288 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:8
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7136,i,9335662629928557208,13285811477135718202,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=4216,i,18327164031839712238,14638399061161525946,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5852,i,16942732407796772445,13941212141344399333,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6368,i,7996693609362167713,8588582340161670884,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7364,i,17117767222773437880,15667024245051325494,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=7392 /prefetch:1
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7404,i,1138708073699203760,8096140496378078296,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7680,i,10453014789943689242,13100253173462903474,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7828,i,7400993763909123744,12515759049107280132,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=7876 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7912,i,7780279795892441401,401266196833557757,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=7924 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7932,i,16902819992464930094,18004059361303176876,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=8084 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8216,i,398065191019767975,17591650408148100308,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=8220 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8352,i,11962506650477335549,3301094838514549367,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=8356 /prefetch:1
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6556,i,12781096546260978912,7398037889445446116,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8060,i,8737402399132680265,13191269898572590533,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=8688 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8928,i,16261979312571988790,7053968710934418363,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=8952 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=9344,i,17023006044733690923,8413781236847935638,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=9340 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=9160,i,11421404968357210303,1892044636691901648,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=9300 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=9476,i,14877057616983281767,6458776405193353358,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=9468 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=9632,i,5262932109285852357,6868928195705812702,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=9688 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9812,i,4771605601245006894,14299734707375671240,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=9820 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9960,i,10403945525414331200,14598812567287541810,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=9944 /prefetch:1
  2⤵
  PID:5752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=10160,i,3409332969381597549,15493221745717129664,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=10164 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=10332,i,1104632497514409085,12921790681833501108,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=10308 /prefetch:1
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=10452,i,11023185123066364660,8238609696076140645,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=9464 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9176,i,4408845239253296068,7119409998308466268,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=9380 /prefetch:1
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9808,i,13311208182507174605,10474391134942430458,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=10724 /prefetch:1
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=10824,i,18316581383245564530,4307269300304564894,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=10832 /prefetch:1
  2⤵
  PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=11040,i,4065130412627587667,3961810550897634231,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=10992 /prefetch:1
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=11172,i,2305908752300646025,5718634580295378640,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=11168 /prefetch:1
  2⤵
  PID:6172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10460,i,11090873723866547127,7309871310842945295,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=10500 /prefetch:1
  2⤵
  PID:6192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=11452,i,5422766380901550471,13955269583044594607,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=11468 /prefetch:1
  2⤵
  PID:6292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=11584,i,9429416461810521588,6597354918922540170,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=9824 /prefetch:1
  2⤵
  PID:6352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=10824,i,8931424487098195408,9521989295079601801,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=11552 /prefetch:1
  2⤵
  PID:6412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=10956,i,5102048177108427026,16507920925418228676,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=11884 /prefetch:1
  2⤵
  PID:6468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=12040,i,8877925661976977723,10346012531755517617,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=12024 /prefetch:1
  2⤵
  PID:6528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=12200,i,9626605559997598106,4828657612652705672,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=12216 /prefetch:1
  2⤵
  PID:6568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11728,i,3339136572537887482,7952625886757440651,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=10968 /prefetch:1
  2⤵
  PID:6652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=12424,i,6662993752137278921,6993945019539997946,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=12416 /prefetch:1
  2⤵
  PID:6712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=12580,i,7835903945250099011,15311573991072095504,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=12412 /prefetch:1
  2⤵
  PID:6776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=12048,i,7587974701903471721,11084396850120533760,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=12332 /prefetch:1
  2⤵
  PID:6836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10960,i,16269121212485216361,2273334221085370930,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=11400 /prefetch:1
  2⤵
  PID:6844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=12336,i,9481706730815475130,15363079343178442015,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:1
  2⤵
  PID:6952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=13144,i,4396000154022475394,15024933241225811644,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=12808 /prefetch:1
  2⤵
  PID:7016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=12628,i,15471005088213101245,16782303947293281366,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=12956 /prefetch:1
  2⤵
  PID:7132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=13252,i,14077394658940082186,4119795394729349333,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=13260 /prefetch:1
  2⤵
  PID:7140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=13456,i,2225854210790097678,8022876725877462440,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=13404 /prefetch:1
  2⤵
  PID:7172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=13628,i,12230450863932205032,16085615564336132106,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=13600 /prefetch:1
  2⤵
  PID:7232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=13736,i,14741624850180570044,2161497673132179400,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=13744 /prefetch:1
  2⤵
  PID:7240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=13940,i,12874257255157323081,15636771544417743637,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=13868 /prefetch:1
  2⤵
  PID:7344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=13728,i,7458441650766461970,2229674572126871400,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=14104 /prefetch:1
  2⤵
  PID:7404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=14068,i,4005935489183889196,4986780988813556535,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=14084 /prefetch:1
  2⤵
  PID:7472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=11776,i,9087660535337862658,6518080047538959870,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=13588 /prefetch:1
  2⤵
  PID:7480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=14352,i,6638665792112530421,9024343904848577200,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=14512 /prefetch:1
  2⤵
  PID:7584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=14688,i,2906711560622823744,3293734853280989027,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=14696 /prefetch:1
  2⤵
  PID:7652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=14668,i,10403550305522067660,4963786658246327413,2097152 --field-trial-handle=2348,i,8680887066218267887,12446943986126422266,262144 --variations-seed-version --mojo-platform-channel-handle=14068 /prefetch:1
  2⤵
  PID:7732

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00012e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012e
Size 32KB
SHA256 2b4c4791160f5dfca7a183de38d7595e2b81d5dd67f8a0e4ec2c210347180223
MD5 d10e72cf2f6d7c260df70f99476c4dcc
SHA1 3b582cce3ceaf79e9ad3447094cd17114ceee6cb
SHA512 fb0a7cd06d453d6c97988963c15aae941757e55c2f0c368e60a50cc79d8c69d8af7c0516ad218fa05821c7e7742b085153f20ad5065b1916ec2930f40f12a5f7
SSDEEP 768:eBqvC4sPtJQlAp5Q7O7iHsbqzMsQaBRtY:eMKJlJB5Q6Ci3sQATY
TLSH
T157E2F1390972F3A827F6652061C7F3A684C874A8DAD3257F38FC52D18749A092B26DD3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00012f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012f
Size 22KB
SHA256 1ad462c75ad5b8d50df657e5f7af0e9456024852fa06ba15a38ab4e173314cac
MD5 d165c04dfc0767983c2a4e1c3eaf9134
SHA1 8b297ba4ccb5efc2a20587d939128912b072b6c6
SHA512 37c13ff63971e306096698e7a885a707da01cf19f543f522f9176b983332e033a83e0bc4aacc76d259a19ec2e52a15a868fce453eb4bd4711edfb70f8a3cff79
SSDEEP 384:ZQYTrrA9DHF7EaU5CJk//QzVy3SOHRj1gv0HtrnTyP7I7nDplrtVI9lU/o:iarMf7EaU5CJKWVyi8ptrnTyP+DppI9T
TLSH
T176A2D02D030862C2AEEBD627E8FB14438E88BE6C5D01987CC559064FBD95EF077B56D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000130

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000130
Size 22KB
SHA256 bdaf0c4fcf945a9bf68c2686b947f3046f28d00940949a0a5d4e1262cc79a132
MD5 72cc3517d85b820531b29bd14f9f3cec
SHA1 9b14615050e59511e22d8dd1d76f67021bebcddb
SHA512 e1ba0c1aebff5059b3e1dd770f3cdced118809453649bf574f1aef343b221f826f082b55ee1f67aff643c51bb1614c755fb96e77f5b5f0061d0cad91acd9caa7
SSDEEP 384:Z3nZagsSSd5qAq45rzqkSOvy/3Q2U3yYbONiSwHmyHdPiO+x4Set1zz5rSCu:bagsrdNqmWdF/3Q25Yb8iFmMdixQHxSf
TLSH
T173A2E10C49C39DBA9EB49AF847D25051D09B3B5E4DEEA36A33481D78512E180EAEBC4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000132

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000132
Size 22KB
SHA256 16a8e016e9543186dd0c974506e0284f1905832c8bd4445ddeafe0c877357457
MD5 1aaecaf07e6e109e5d0dde4e2664b1b2
SHA1 603029334f59e8dd51e68b723fb1b5855c8316d2
SHA512 776dfbbbe676f12acf1441a09c763a04bd5efd16516bbbe2bc5616e3428750b5d4c1f2b5edc0a54f22975dd3d910a1888ff1830e0de50ff677603285aa9e8f11
SSDEEP 384:Ze1xzO6NCMKM4ZNPMil4FtnLdgziXn0XOkZ1f5ivDd/MCXymKQzi7SeDEL88:Q1ROnMKB7PdlZziXKOifQDKEi7U88
TLSH
T162B2F16124BC5E438C5519FEACE5911BEB4D704814AF8A3C6E573A0F20A5468BEB33F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 b77a2f9661507ce605bfcac97cdcf0df0b6b107b27d10f949c08d3aaadab425c
MD5 cfc70f45cd58ea3fae9246ff19022396
SHA1 f16d1a952681ed4a6d2dae7a2102c114b651cc16
SHA512 df923d3478277a976a4c73e75400d01fa53cea4e4f4de726778292c3bf45e9a47de84a0a87fee38d7882e58e3cddd1276940374d45d2a7c1025da342ea68120b
SSDEEP 96:fWCVVNtLuEsuUL8md5d3G6WrnuYI/VDqROV5eX2:HnB0uof3PanmFnVIm
TLSH
T1D4916F95438230A3FBEE313192D60ACE7BFB5C91095FCF3701136BF92A267A14579648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 a039048b44f03961c6fa3eeaa69ed1e2dc21f84fb890707b24b6026285c81ef1
MD5 f3a467d59916af0fb7c11f1a22244c8d
SHA1 4453dd25a1cdfdee6a10d142c8d3486ea72a9092
SHA512 c587ab2b0bd4f87dfeb64c8fb2575dcf9b8ee41a9f86d0ec1c4f639b47079563b4e77e50822963eb373c919b21a4580a4746d2d639c36d87f23a8c8ee22a8440
SSDEEP 96:FWCVVNtjuEsuBL87d5d3G6WrnuYI/VDtOoZ5eC:dn50u1a3PanmFQIIC
TLSH
T1B2914E95439230E2FBEE313192D24ACE7BFB4C91095FCF37411367F92A267A14579648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5899f9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5899f9.TMP
Size 3KB
SHA256 75c28439a5996b09fdb2dd72d317705e710481570c7087ea158332091374e535
MD5 3dfa1a44a80a163d27f563fa27bc444a
SHA1 3b2f67a656ae6f8c3c6c4a308275d0d6b0d83391
SHA512 2e237c6d286415612eda1ddd9ef91e6351434e2d12caa696732b6cdbda0af385079d22234bd9d5a610cba8ee972c3232c1ff631a0c7c44823dc377d2f6374b74
TLSH
T14271526547523451F3EE3131A2D206CD7BF38C85199FDF3746232BF92B267218A79818
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 e01f6a6729b8eee24e46c1d3c4e314a73e69bb3ae89c85e09284de1e698f45dd
MD5 9d00df2c27b0d1e333c9fc9da758c86f
SHA1 e30090137dc5a40a2db09fcfab3d61d5ecd11fb5
SHA512 92f4b99a4d40f118e71a65c4feb4371691a781b2097fac83584fd47062698f3f8d29a62501ff87469d9d1092dce80567c3222a5d766c140e33922288b776cd9f
SSDEEP 192:DU7X7G7r7p72J7v757me7FV7oO7I737l7i7WX7F7QL7l7oj7IV7O7NR7u7d7v7Iy:DU7X7G7r7p7+7v757me7FV7oO7I737lS
TLSH
T1F2F192F3D3E49A6DD81252F5EA14BE2FCE2E0514936C381F89D16F5B97E2031E141A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 cb594630eee422a637feedec149ae012b9707420811224d1665a68bbf9e08e2b
MD5 a5c2b4cc46b3371403ba7663fca43873
SHA1 493b0f56fb53981415ad821c430e1a855aabad45
SHA512 5b103b6182fe69393971ce88b78145c013b5f40a56bff58cea63d293a6bf7dd2655773241a8935ae27f95bf0e22566ab05bc66ec8ccbed22082433491e83a237
SSDEEP 192:sxZiRZyM/jK1Ml8MkD/fqsgL7teGIdpXoHW6+WNB3F/YH2M7+LIgrJ:sxZizMD/fqsgXten4Hb3/W89
TLSH
T1A752F9126A346977CCDBD209FA55BF93D6F50572A2905E44AAFCCB0C04E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 71f8562f87c5d8a694528b8d5618da5b000108946162faf3875d4fa2fef7c59c
MD5 b45588f31f0dee0480521706a8730b71
SHA1 0c44fe5a3326a33a1769fa06511edd1ed8cd4220
SHA512 a7f09411e1178a290477eb0920f8aa49be16744e07c845390c55206ce3c764e29e41465c355a9fdfd365ab1046d1886c9df6c89a3840111c52cf3d5a8099de75
SSDEEP 192:sxZiRZyMojK1Ml8MkD/fqskLrteGIdpXoHW6+WNBixdYHrQ7+LIg5SJ:sxZiWMD/fqsk/ten4Hb+dt8c
TLSH
T18B52E9126A346977DCDBD209FA51BF93D6F50472A2905E44AAFCCB0C00E6AED224781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 510d2e1e142b25d86fa825b9228c4299c3c6b7e367393e087cc3cf7d8e56364a
MD5 4dcf1c3a120c798f296516f62174c13d
SHA1 f219fc9c3297c75d30af76f9f6c4cddb067c42d6
SHA512 1f7a225921c7fd884edcc31be58f21dbd7bdc15f5a3bed6e42202bdbb2516dd3478e46ec15e2a980378c0fff50773169c5f78fab95e264255794400e1f643040
SSDEEP 768:f+UZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RAroVi0R:f+UZYTMWvg0Pou1ja7eLZmRL7R
TLSH
T14FD20A3B280CCB7E4F844E9DEC2A6F963ED801CB5A584D5447EA894C02CB3EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 21d1bfa627445314ee85b659ba8023a87d1b4cb6859bffd3c325b5623702361f
MD5 d2687057b47536041afdb9c3ce119794
SHA1 93112b0cda120245c3006f3d84bb6ecbc923e78d
SHA512 cdbba20e58541e95570d84add2da3c1d748aec6649ef416be1f07589136654453ece524c44869c01c0e10b0080165cb101c1c77735f9edd343041754b9fad3cd
SSDEEP 96:KA1eK2AANKK2IKiSIK/KcGMKvqK2jWKcgAjsJ9rm:E0RXs31jjsJ9rm
TLSH
T133D13C2270FA62423C7D6B08836497178E41F593306DA86B3B6C65B14E26E209CFFCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58fb72.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58fb72.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 98321e044a661598716f76623baaeca292df94932485177d2fce2e2ffd1bd7fe
MD5 e222af6d4568beb4798ca0ab41dc1c0a
SHA1 e46ed0b4af0122e17c7fa02424b43a21fd16c807
SHA512 c5d7cba84c35c5cecbe8bc1f31e41dd83b350e570ef2014ae4a442908a5bfff95d3d60a5e45dcc5a16acf7999f6643d619f5ad977948541ba134d650cba13c70
SSDEEP 384:dtNn/s3n9SfsNwUA3f16JzX5od+ROwVM4lOObjI9G6w72:dj+9UwxOwOEM4l29M2
TLSH
T1BC929D32A829AE739ED29199F58B36578FF8417BD3843F84D5EC6F0C01DB6AC0306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 2bc167dab384a5dc704c359d3949c7d6585ea7f61a94d07a4579315ea2f7039e
MD5 faf4753cda3c3ad27064a8a488dcd9c9
SHA1 040bd4228b6ec8db7a836976250559d394da6adb
SHA512 0616ce3e1339b56b6faed3d54f3f8c6de3a057d57167911eb595a9fd057eff70affcc611e3722422b27a4e2113aa6f8acc053420c24cd77991d4d67978d8d2c9
SSDEEP 384:XiF1tNn/s3n9SoazsNR8TUNTUlIl93f1pJzX5od+ROwVM8lOObjI9G6w72:SF1j+9E0wg7xOwOEM8l29M2
TLSH
T153C23AF248D78976D99E8787B77E3D168EBCC167B1406A84B3D85A0CCC961BFC306910
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4dd720a4f3b9065b4213f6399f55a0e3ae1d89ef96573b8542d1c571fd5037b9
MD5 42ef7ed91f111f68492ac4ae3ba6f852
SHA1 8692b16b7dcd54e2e508454fae040568e876bb38
SHA512 d47f95f8a7c57f2c23830ab845903615e05321a3ec4c856a9b040220fe930b5cb97c50d2a6a8e74394692b18284cbff11cda24455e6714ff7b3c61ca78fe1553
SSDEEP 192:yON261VWQmiUy4ZgGX5Obd+jtOwaojD/aA3w4U6:yON26WbgGX5od+ROwVyL4U6
TLSH
T1C002FA36A9286CB7CEF2AE4AF58733135FA51067E9547F84D6E81B1C00D769C2307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9dab96a56701e27151d9d4f44563148f7613ae8abeae160972e4c28b84870fd1
MD5 f6670aa893736f26515057824df952b2
SHA1 40f4d2d670f4b89f3e3e70970764b0c3ae0f0735
SHA512 c069e335790c2154d08d7b0bef0a6a3699752984689ac6b3776f585f970bd74611336996333b379d8a672db2699f67cfc1b2e3d01a246ec4f3ca988925f61dda
SSDEEP 384:rtNn/s3n9SfsNwU93f16JzX5od+ROwVM4lOObjI9G6w72:rj+9UVxOwOEM4l29M2
TLSH
T192928D32A829AE739ED29199F58B36578FF481BBD3843F84D5EC6F0C01DB6AC0306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0393ac97b217f278f5aa5c1177bc62556bfcf98182a7681724818b236d01d4c9
MD5 043b688951c137450897be9837b7e469
SHA1 91de93a2eab873424a96696947ae90400e17eb3e
SHA512 2ff656e3910f3c2bb882eea2cbb9fbda44573b4ea53339ff2e2833ecd8f6a64b5ec9b1373141d08df484e0e5705669de072b3a7eaffd570b7951e58f8349f2fc
SSDEEP 192:jONa616WQmiUyMZrGX5Obd+jtOwaoj4ECjJAnqoMU6:jONa6DprGX5od+ROwVMvlU6
TLSH
T186123C36A428AC779EE2A585F48732538FE55167DB45BFC0D5EC2B1C01EB6AC230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a510362be602ac078e052a9758c22945b439c5f7d5e3985ae666d53b9116e2de
MD5 7ac0ce33f9d98728491b19c6022b5785
SHA1 408ad1e41adaea87643d13be5f14c6d742671daf
SHA512 99caab856266fcc84aeaddfd698aa0b5a4f4fb6c5b9891730cf1c26398c6a2a0e117d4bd871280e27c4916e886d9d894f82764f6315f2c45bb286367f97683cb
TLSH
T116E00252734000A7D414437004C71B507FFBC12003B303077F6141789C373013D21B84
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 04c6d3de4c549e37fb25e75a63d736ab4dc0b11a4679315303b04365ccd98e0b
MD5 65728d2210d148c4f07d8c82dbde2d2b
SHA1 7a3e95d14c2e299531820d32b74c326b64cd54e5
SHA512 da200d8a07e108120e3d5f12ad828de1da9766a595ef6177720ffc74b44c0778e06d0bd4279a76e01c2af1d498c19af1640f0d3422de3359bbca086ff8605851
TLSH
T101E0025073400017D414437004C71B507FB9C10003630307736141789C353012D11684
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58a36f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58a36f.TMP
Size 392B
SHA256 6b610d72e496bfbc47a08b1f6b5468bc06e1c950e35c0c33a33c5e2477fea4aa
MD5 de5d3f22c6a6b8edf65f74d77f381b67
SHA1 c80a9021f2b1d462591288413b62f1e51cb99790
SHA512 b494eb21af52c120b7817982b53d178d41bbdf60d26367083d99ff99edfcc71948011fe15c796c4a14b190202be1230dae8f3c1f8c28231790bfd78d5964b2d9
MD5 SHA1 SHA512

Submit Download

8b1f83e5-a544-4bce-a6f6-22d6c4faead4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8b1f83e5-a544-4bce-a6f6-22d6c4faead4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 544fdb92389a085c2ecdfe838e51a66eaef8a5a4591974766e8ac129e8bdf5a6
MD5 d60f55ee069174cf5dd874938ecf0321
SHA1 66c047d9adfc61e290f81442acaeac2a93201e64
SHA512 b7c212cae9c2b7cbbe38859e08ce269e6f1dee86176f081a6bce53d21bceef0d060339b0db34bdcca45f457f82e27cf9e8c4cb923750e9cfa94ef16330467f55
TLSH
T16E41FA5CBAE91148F3B77F5AABF6A86D487A7D772A06C05E00010D4F0666B40DCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads