hxxps://office[.]com

Analysis

user interaction
yes
max time kernel
1104s
max time network
1101s
platform
windows10-2004_x64
resource
win10v2004-20260513-fr
resource tags

arch:x64arch:x86image:win10v2004-20260513-frlocale:fr-fros:windows10-2004-x64systemwindows
submitted
17/07/2026, 06:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://office.com
Sample260717-hkhcmsg12x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1388	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134287444687679619"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{1665B0E9-634D-4742-981D-1E0BBA05871B}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1976	msedge.exe
1976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3468 wrote to memory of 2344	3468	msedge.exe	84
PID 3468 wrote to memory of 3116	3468	msedge.exe	87
PID 3468 wrote to memory of 1388	3468	msedge.exe	86
PID 3468 wrote to memory of 1728	3468	msedge.exe	88
PID 3468 wrote to memory of 3116	3468	msedge.exe	87
PID 3468 wrote to memory of 3116	3468	msedge.exe	87
PID 3468 wrote to memory of 1728	3468	msedge.exe	88
PID 3468 wrote to memory of 4704	3468	msedge.exe	89
PID 3468 wrote to memory of 828	3468	msedge.exe	90
PID 3468 wrote to memory of 4704	3468	msedge.exe	89
PID 3468 wrote to memory of 4704	3468	msedge.exe	89
PID 3468 wrote to memory of 828	3468	msedge.exe	90
PID 3468 wrote to memory of 828	3468	msedge.exe	90
PID 3468 wrote to memory of 4288	3468	msedge.exe	91
PID 3468 wrote to memory of 1396	3468	msedge.exe	92
PID 3468 wrote to memory of 4288	3468	msedge.exe	91
PID 3468 wrote to memory of 4288	3468	msedge.exe	91
PID 3468 wrote to memory of 1396	3468	msedge.exe	92
PID 3468 wrote to memory of 1396	3468	msedge.exe	92
PID 3468 wrote to memory of 2240	3468	msedge.exe	96
PID 3468 wrote to memory of 2240	3468	msedge.exe	96
PID 3468 wrote to memory of 4964	3468	msedge.exe	97
PID 3468 wrote to memory of 4964	3468	msedge.exe	97
PID 3468 wrote to memory of 1696	3468	msedge.exe	98
PID 3468 wrote to memory of 1696	3468	msedge.exe	98
PID 3468 wrote to memory of 1696	3468	msedge.exe	98
PID 3468 wrote to memory of 3768	3468	msedge.exe	99
PID 3468 wrote to memory of 3768	3468	msedge.exe	99
PID 3468 wrote to memory of 3768	3468	msedge.exe	99
PID 3468 wrote to memory of 4192	3468	msedge.exe	101
PID 3468 wrote to memory of 3052	3468	msedge.exe	103
PID 3468 wrote to memory of 3052	3468	msedge.exe	103
PID 3468 wrote to memory of 3052	3468	msedge.exe	103
PID 3468 wrote to memory of 4484	3468	msedge.exe	107
PID 3468 wrote to memory of 4484	3468	msedge.exe	107
PID 3468 wrote to memory of 4484	3468	msedge.exe	107
PID 3468 wrote to memory of 3720	3468	msedge.exe	111
PID 3468 wrote to memory of 4844	3468	msedge.exe	112
PID 3468 wrote to memory of 2288	3468	msedge.exe	113
PID 3468 wrote to memory of 2488	3468	msedge.exe	123
PID 3468 wrote to memory of 2488	3468	msedge.exe	123
PID 3468 wrote to memory of 780	3468	msedge.exe	124
PID 3468 wrote to memory of 780	3468	msedge.exe	124
PID 3468 wrote to memory of 780	3468	msedge.exe	124
PID 3468 wrote to memory of 2812	3468	msedge.exe	125
PID 3468 wrote to memory of 2812	3468	msedge.exe	125
PID 3468 wrote to memory of 2812	3468	msedge.exe	125
PID 3468 wrote to memory of 3732	3468	msedge.exe	126
PID 3468 wrote to memory of 3732	3468	msedge.exe	126
PID 3468 wrote to memory of 3732	3468	msedge.exe	126
PID 3468 wrote to memory of 760	3468	msedge.exe	127
PID 3468 wrote to memory of 760	3468	msedge.exe	127
PID 3468 wrote to memory of 760	3468	msedge.exe	127
PID 3468 wrote to memory of 4372	3468	msedge.exe	128
PID 3468 wrote to memory of 4372	3468	msedge.exe	128
PID 3468 wrote to memory of 4372	3468	msedge.exe	128
PID 3468 wrote to memory of 3188	3468	msedge.exe	129
PID 3468 wrote to memory of 3188	3468	msedge.exe	129
PID 3468 wrote to memory of 3188	3468	msedge.exe	129
PID 3468 wrote to memory of 3356	3468	msedge.exe	130
PID 3468 wrote to memory of 3356	3468	msedge.exe	130
PID 3468 wrote to memory of 3356	3468	msedge.exe	130
PID 3468 wrote to memory of 4284	3468	msedge.exe	131
PID 3468 wrote to memory of 4284	3468	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://office.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ff8f191c188,0x7ff8f191c194,0x7ff8f191c1a0
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,3541709824532388223,12918327101418757151,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,15695154430037891070,6520358318885300689,262144 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:2
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,4120566892044744956,11041284880320998930,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,10741426335520801854,16892259994499673872,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,7964196067604590662,12167655122752739399,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4128,i,1909815624796007792,14448642067959947141,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4152,i,11639755356027514973,15905602687163918310,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:2
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=fr --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,3346593954534536432,9024257672443327849,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=fr --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,2877432546725085463,17562333872816197794,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5784,i,5587480903466300840,16922287797757303450,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5944,i,17733439652019642981,10955955640089966215,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,6546457062011253789,3170591143136853349,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,6546457062011253789,3170591143136853349,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6676,i,12684310548019247620,3929397204969654401,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6852,i,9150755571355432800,4927950984475769798,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,17814209753386650813,13870364112216700444,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,199321930112159174,5534086606250229494,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,4004209279354573541,9316392598866785001,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=fr --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2060,i,10724915649658735587,12589400243032729187,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5704,i,2327369328419962844,10288299809963655593,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6544,i,15220655117313512903,201755164664030116,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6988,i,15253818384872456512,9928112842609242724,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6036,i,4660199509058546525,8951625548042555546,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:1
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7148,i,11536451339143043118,16167028771935331553,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7252,i,6041049043529147616,1486202934876980884,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7260 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7388,i,16598180855496717759,5878750365309853864,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7392 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7400,i,2152171130329192253,15022130117744197186,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7408 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7556,i,4411822087200609013,14380854164519429300,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7588 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7880,i,11494779898651744366,1481320545990780165,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7892 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7996,i,12286212659977285454,13457946494286556829,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8008 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8160,i,8627266324664077153,13645201204839402027,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8028 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=4452,i,11566633708619805679,14563356160941461993,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7380 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=4852,i,15168511907532975998,1603710223342024287,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8044 /prefetch:1
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7264,i,6989902077756441732,1395524077010960382,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:1
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=5208,i,16764674811139582667,18294862867092835166,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8200,i,15438180916382033593,11505285562878866884,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8228 /prefetch:1
  2⤵
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8736,i,4406238610093655309,10173911028536729745,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8704 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8228,i,12706755162275840909,17503905895428344215,262144 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8600 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=5504,i,2070583887505464011,76698427104102175,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8472 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7992,i,16646640345119713687,13438269819147072068,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8004 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8336,i,5790717692087114701,3642249007436032016,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=5840,i,9964043883651325079,10034206267954393274,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7620 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7932,i,15506512607972654032,12147716939015688102,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7992 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8056,i,2541298197231125778,2376629584824893807,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7900,i,18410229143378896192,14636927575407523552,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=7720,i,4668165366862984785,13281481858348994419,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8196,i,810752533954181599,9355148291598898452,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8016 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=6092,i,13872116687252229495,1895371477299682319,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=5924,i,17075645153320145690,12504532382747654216,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8556 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=5952,i,9424516270378332719,4380927598022126801,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7196 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=5896,i,3437286205499985519,5594166854595610534,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=1324 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7240,i,15815881611066795671,6639559786524030820,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:1
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=7684,i,1048983676329660132,5639110331346308541,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7656 /prefetch:1
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=3744,i,1784972028420505114,13370252290351856700,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8240,i,16302844151140463884,17283107702337125316,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=5368,i,1491638875974059550,14570320669213843850,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8400 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8720,i,5260716606699341286,15238360249758612583,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9092,i,13139699521090295839,4424546331956426243,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=9244,i,3124905477943573919,9247844974142786262,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9260 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=9432,i,14145896246405821973,1861184504925911761,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9436 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=8320,i,12646624446638731893,8447729317010219809,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9452 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=8720,i,16111635684156757571,13705007239909169730,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9588 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=9844,i,17334859717853321003,5437507108429477389,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9488 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=9852,i,14276624139189291661,4585214230027471409,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9868 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=9828,i,9142923532843806413,10862629442797027026,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10104 /prefetch:1
  2⤵
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=10208,i,5837687556153083012,3511444500843130765,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10212 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=10348,i,7070504327630216055,15870544633477529046,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9600 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=9980,i,11579288343271545338,2640336681478913619,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9104 /prefetch:1
  2⤵
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=10008,i,17495194235297579362,51282538889505745,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=10064,i,3304037588786095304,9710887071803262305,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10052 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=9788,i,7481101331156230752,11228198783315053987,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9736 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=9760,i,1126632747043541,11456298238222184374,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9852 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=5876,i,13204623045541304704,14441572366486560259,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7716 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=7260,i,9811514136636395671,4580465738669589488,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9980 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=10328,i,7646641860671043862,18344196341977828345,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10344 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=9560,i,14060390997081002019,10098206235196461501,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10216 /prefetch:1
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=10516,i,11984176703410883892,1297997190692349766,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10484 /prefetch:1
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=10520,i,17756201378431072415,9826045287457810500,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=10644,i,10460646539295877559,4353764103263612528,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9408 /prefetch:1
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=10656,i,5918061381821291350,3584735713870564607,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10244 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=9552,i,9094641242599002555,16084232309231608139,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10276 /prefetch:1
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=9472,i,8012456983211999524,3360893400820431337,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9148 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=9528,i,3208076948021419278,4328984612369882149,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10056 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=10032,i,15451044193890494908,7435879655283215289,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=8064 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=5272,i,8356296053290094950,16403944157338127010,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=9416,i,13168378789742838945,5111307055105795322,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10504 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=9116,i,16668279861626919323,3558637912131058027,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10764 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=9416,i,10903959574905027059,1487365912570503450,2097152 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10872 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=fr --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,11384753497535731222,5492520500509223423,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9992 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=fr --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9760,i,2693494951040099308,6927460590611427422,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10352 /prefetch:8
  2⤵
  PID:332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=fr --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10604,i,17442611897909708255,2215006909063234752,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=10584 /prefetch:8
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=fr --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3980,i,4199914604879471288,13912289724085303875,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=11096 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=fr --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7128,i,15034793159112000363,14253268453136715410,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=9488 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=fr --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11112,i,1469060361872693554,6357591026543534067,524288 --field-trial-handle=2444,i,18120889914854435656,631700335186366436,262144 --variations-seed-version --mojo-platform-channel-handle=3960 /prefetch:8
  2⤵
  PID:1504

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 a2b4c15f0d94536b1830e293db487ebb04e566ccf716b4ee37a9c4e938198d53
MD5 db607687d67e9f45b572a75c9a2758d3
SHA1 741df191fd8b71b931c7b3bd567436c320b3c485
SHA512 f48c7d236fe9a963892966118b00bc399fdad8731bf9aa9b664bb2e34b12b4bf136e2ab1da43ba52e2d1ed0ecbaab874d1440afaf918761b2c769167d91282e4
TLSH
T1A1E020D604C5C65DD54476878274530C41807A8BD7C46E5D6BC485687401844FBC35E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 366254fd8bb51e256bea89d3acc1c6dac70e7520ef3dd873db328b8644d759c1
MD5 dcf8fa6740b0e3afb2553a3d69551ec5
SHA1 125fed15cd245b588c66b48ad22532030338fb31
SHA512 c8cb49525f2024e12fb406cc97f9139c06ec5ce58ac8188066d635f65bcd059b23703be3b1cf0b04f84e17cf0962943a8d334b1c0ecb90062ee05f9b8cce27e6
TLSH
T13CE0265A1380E5ED6AA9969F8049837CC1207197DE9CCA7A32CCF2AC6542000CB75084
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 49KB
SHA256 737f5706a38444f7df7b5828f9194ff7ff1cec10bc1999a4f085f043fe3a6b79
MD5 af6d4697c9a83e6c7619aaf3114b5600
SHA1 7279f4b3cb3ad97018aa44cbed0c70da2afc3f83
SHA512 6a0bee24521dd568213313777c7365fb2a7c4e8ce7b4865c46920ce611273a07eeb8a440ff0e0a57cba5d0cb2baa11367c53493ed1327ddfbe427621e6fcd3bf
SSDEEP 1536:JJKeSPVveTgOoGMxb1lkAlf+TiTb5ZAmtmM:KejMOoGMxwAnCmF
TLSH
T1A93301BED9422B73939C14DA8F40B7FCDCCB017C458180FA151A298646DB55FEE8B98B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
Size 22KB
SHA256 fbf8572501974a28db1fc232e15590ef68c722837cbf3e76546381df99ffd29b
MD5 cc93b6d0aef45554a04560935ca539e2
SHA1 df341b1218c13fafd4dd7e0920035cc19930421b
SHA512 2802a74007b43444fa7458f7c6f22c6f8f828eb33b3e5d537f59fdda9c40de20c73b0aa88653e64edf675e0b078160b890e23d0b1f40e0ede9f32b2d3849dae0
SSDEEP 384:PN9cHjc6rh3Ue39FZKPaUdTnt5l3Ix+X1sJvp5A/mZSSQcZpg+auxO:Fw1NF0prBXmz5MmZdMP
TLSH
T1A9A2E1247C518B8E2E99C3007DB9E0957A3EE94B7938A62F0589CCD493FBC25277944B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
Size 54KB
SHA256 f2d356c9ece84ceb6416b6b1b3a293c4f6a02f174701b69570a83e093d101777
MD5 26250899f42fc216e8ef67a3061dfd58
SHA1 f92314a75c0c078f87bbe0dae415fbf2b4b330f3
SHA512 39dfa643a90da31729b04084f1ba63b21499ba852367277b1d16f4a3bb3c6f6bbb8ab1228a0140c5dafff5d1515e09ef33adce9d14accc3fd3342e4617b3dcb0
SSDEEP 768:FISLolxEttnlnLzcdtPSCLVR135IdHjICBplDXtp3OBiB2Pk2jM1tm7yP5q5YraS:SEtFl8dJSClmljAW2P3jM67WETZiHAkP
TLSH
T1A343F18B83FC778D646DCA2A56DF6480BE5335699F7D93B52893E794A82800F10521BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
Size 81KB
SHA256 d0b0989f1a77eda02d29526dd3838e22213787d9bee2bb8ffb9bdf7b9f2fafb5
MD5 5a05876f546fef4704020254e7506b9c
SHA1 346359d1a76665be30c23a7f63143943dc7947ea
SHA512 326b5bf378400c2f7ccb3e228a40a0131962b6a1f4da8146fbe2b9ca0150ac745c1d19dbd33c07493b8992e5459c8c9c09b45a71165973fcc401cd42ae1a5b75
SSDEEP 1536:48hNM/7eNU8EbIrLrJoAcWYAz1qnUHE/iZzhr88BIt7:48c8U8UIX9WWd1qUHzzhC
TLSH
T17D830275360BF84442207601993AAFBC8B4134D466DAD693ADE4BD60C5CFDE7B32CE21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d7
Size 58KB
SHA256 c490313f012a2899cf7e668fda73a9af18eb0a84f8af3790d6f550e0c2d91afc
MD5 2a60f823a02bd4c1325fa68f484a4d1d
SHA1 354f4211e823ceb6a87562f00e41de5c57bf55b3
SHA512 c10363f09074e21c8fc0358dd3f856788af7c5530d37d51a8c18134d7f554e61be46547d7ac988bb8fb7690f2d28b20c972d0529c2c7cc94be26143e5512a3a9
SSDEEP 1536:TPbm5EFs/ZWM5YTuM0GAXjcmW33YBeIVwpUuNwtA:TI+gk2YoYmW4BeIVaUp+
TLSH
T1094302910E2CA4D72538D06C3C63799EF4A73364E432930411EFBCAE28376575E8756A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00f9abb49e27fa47_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\00f9abb49e27fa47_0
Size 88KB
SHA256 7f0d00adeef8b0af467dfdd6820d1b7983579b5acc25adb6078a1e27b2d90de3
MD5 3ab82fe4b76ca13569a11780136c4909
SHA1 f6e7fa4f6ef58e22f2997597f8a19356ada55b34
SHA512 44eef4d21d3ce27383d7f5d6cc4fead650cb320b4dc885175ef46467581af4844b8bf94f5e68c0b224c3220e49c245bfb90a877f3ecc1b8ae4c72aded3a2befa
SSDEEP 1536:V/47Uv0D72cETbHrkBap19lc/T58LjoZ3KB4fuAaE5ckyOu4DIqEF3N9t:kUv0D7oTbHr6a1lWN8Lja3aAhuCIqEFd
TLSH
T10D934D1F87C426970DD20255B7048767AF30C6CCD6A7C258D4AA61E724C1A9AF3EF1EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46839aa47f148305_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\46839aa47f148305_0
Size 263B
SHA256 899ba10d7eac4fb6c389dfa931e3480bc1622b4ff1434fcba8a6ebd6cf21fa2c
MD5 b4d4c48e85a70dea12ea02cc40392a01
SHA1 01a553aa7e4fd0f50b69015373afa61e079e9605
SHA512 ada5e675f8fcf0c66129026d4655e2a713e12a573556184d3087132aad53dee83a995323986e3f6f6696ae2859df4fd7d3625c9b48c96c668a0a833ca7482206
TLSH
T199D0972F3410041BE63D82F0F7BEEB2BC86B98F58838D182858220270212270BB4162A
MD5 SHA1 SHA512 TLSH

Submit Download

540f214de78ecb79_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\540f214de78ecb79_0
Size 253B
SHA256 3d82dfe221ef68548eeb1ccecea0924873e77c981df00d887f4204b9ac1d5bd7
MD5 c7caf0add7dc6f84b0a39f8f43dba7f9
SHA1 bb630021f967466c9463318af175c65e660c6f32
SHA512 b79d8e03d673783942134d20a50be60e0afdd2983d4921ffb67a910de8f900864656b3d2f693339b29dc72e4d3194514cb104c717986b64580b4fbdfd5ccca9a
TLSH
T176D09723A8CA600BDE5D83F0E7D6A78ED33340F98E1B81541080802332880377B2F140
MD5 SHA1 SHA512 TLSH

Submit Download

d526d92e52d63034_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d526d92e52d63034_0
Size 127KB
SHA256 057c91702f455d8085a60ae241c3b3a20001c79223a6dc27479add82e6d109c9
MD5 103295fc0b3552b21d6c5dcd1f3e4a94
SHA1 85dafa2c58c7f975b6a73a368d1d389ae6300e32
SHA512 4880f43efecca9fb683ad19d83359a2bc6fc288e5aff5bd3ab20153186c9dc52b69e6ace3b3dac0c24d8f811464e29167c0b524beae7b2fa25a594db45fca5a2
SSDEEP 3072:4vdNe7OsWEKp9LediF+gUzNP+cHx4Mbqu7I+FiAimUH4iDlbc9Cwzl+YH:4vdNe7OstE9LediAgUzN2cHx4Mbqu7PT
TLSH
T1D0D3F70A93D02219EA3B57FE55738E136731B8013E8BD34B35E11F2D1D663EA9D8660E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 de4567d42290b2cd18553a7b44555aa70e19ab7570cef2b1ee2676c3cafb7829
MD5 02365efcfd8328b29f885c488c725ca6
SHA1 bff6e95e6ceec8be53039751f49a6dc1122d80bf
SHA512 3623fd1dd3caba3938e36824b13a4f36cfb740dfcaba239d63bacb8efd9cd1586ef6fbe22d8d1e09abccf6d79508cd96f201981551595e2cb0da07ae58acac9d
SSDEEP 96:DYNKS9893eg/V4VCthOwYXU4/ym/2xh+9P8Z10vXT:DS7eEosKOQI/8+18n0vD
TLSH
T104A1600055414085F7B234FB50D12A0A387786EBBADF6E0B91C0DBFA6D3EB68825B5D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 76dae6896b020739b8e53b0aba3aacc542db4c8a668496cd32085d45595f5789
MD5 e29b12676a54adfb2112aa88831132fb
SHA1 a7ca0444bdcef66e96a3ca1270b0f8fa3f99c5a0
SHA512 98e5c9d0819838695b2c89a0ef39fad4b41d0c653ad3e1212e7c8d3870cc29e96d5e56c7a2ab5b1d9b5e64cd4531196ba8a7189bf44079d854388bc56e1cf81f
SSDEEP 96:Cqne+x09hY6gsIZsCYqhbXGPUXxmieykBI4zV8nR/eV0Vycrw06xc:leaWysQYqR2PKxQnIWbG6xc
TLSH
T182C1A34525414192F76234FB50D1290B383382FBBADF6E4B81C0DBFA2D7E768829B1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 59e9d33a8e1696e30f1913298e004041ae400941dcf6ff01c0266648568b5bd1
MD5 bf9550242629a35ec82052dd9627696e
SHA1 89a8c369312e1be0cdfe33d7c9e117ebb0399c7f
SHA512 4f1484045f261ba301a71625fe7bb59fece721ef927451cb7d253bb922d811b6dabd57f740c3147afff9a898002d6e9f7556895384d8923f543fc0b2a39d4777
SSDEEP 96:ocqne+x09HY6gDIZsCYqhbXGPUXxmieykBI4zV8nRdeVjVncrw06xI:8eaW8DQYqR2PKxQnIU/G6xI
TLSH
T12BC1940525414192FB6235FA50D1290B383382FBBADF6E4B91C0DBFA6D7E768825B5C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 4b2306f87e3fc9acd3795276efeef5f1477367ba8aea425fb4490a39bfdd4b19
MD5 6696bf447ebb69c097dc747e333be5b2
SHA1 6d607afb6cd8e2e7e5c7f7403c6b479dd8f0ae1d
SHA512 d7a9a27c90ccf58e4a6a5bab6136934d9180570b364e168d32641ec9980b6bb6b8a96242c107704bde83d7878b5dfa22c296e941ae5880391afbda7d455b63ad
SSDEEP 96:qPKSfKWg/V4VCthOwYXB4/yq/2xh+9P8Z30vXt:qP7f5osKO1I/8+18h0vd
TLSH
T16FA14E0016414095F7B235FB40D12A0A383787EBBADF6E5A91C0DBFA6D2EB5C825B0D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 59f5d5ee136aa428cfa4471fdf53e7ce0e72a50209671c442f7721cf13e370e6
MD5 d9c2df398f8f0e072b83711ef6108f4e
SHA1 b7aa6462b6ed2cce075a8d96458da60556edb0bb
SHA512 4e364fbe308956b90c5a2191995b785fd6fe18ecbc089d89d9070756a2f8e9c346ae7533b96536f1b338510af413ed920619f1bf7064a7b74a45109d41bd0e13
SSDEEP 96:Kne+x09HY6gDIZsCYqhbXGPUXxmieykBI4zV8nRdeVjVncrw06xk:KeaW8DQYqR2PKxQnIU/G6xk
TLSH
T170B1940525410192F76235FA50D1290B383382FBBADF6E4B91C0DBFA6D7E768825B5D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 b9ce1758bcb41114d370ac1d0bad7131b5ce46aa982f3f3979a0d308608e92d4
MD5 7eea6318bbfa603a1ce07013c3cd9c66
SHA1 6c6ea722cc92c23de012082940e97e6767fda05c
SHA512 c474105316097564b2a10ff32263a989ba28d1044bd3f2b952cea92ce42ecfd0ef9e99fcab6f950f5082caf070ce1ad6b22d9ac25b2018707924f65455b1b7ed
SSDEEP 96:2qne+x09HY6gwIZsCYqhbXGPUXxmieykBI4zV8nRCeVDVncrw06xw:JeaW8wQYqR2PKxQnINDG6xw
TLSH
T1BFC1950425410152F76235FB50D1290B383382FBBADF6E4B91D0DBFA2D7E768825B1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 846903db44f1e1f23ac1265443fec832237814d7b7517bf80362a99cfd9dbf2e
MD5 d7696f3aff701d7cf4d46a3f31884c0b
SHA1 1702319dc441b040f56ed5dd5f09cf909b6f869d
SHA512 021cbd96658644076b778b4c0681eaefb2398bd497ebf105be8010e17f77c05e0967c922691f45248a9394037f5c057ceff8f1eadef76aa78df43f22414d9f55
SSDEEP 96:l0KSf3WE/V4dCXhO5LB4/yE/2xK9P8X3IvXP:l07fGkk8O/W/z18nIv/
TLSH
T107915F0115414485F7B231FB50D1260B347387EBB9DF6E5A9180DBFA2E3E76C829B4D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 52abc3f367e2151de2530bde7e5e9abb1d57cd4488d887d5182f566d68853795
MD5 ad0a05f8a16284a0b71d202abe26bd64
SHA1 fa9583318c87717222f9ba2b14841f08639632be
SHA512 a3b66190e3184d940a085009d904156fe5f1e50d8f0458c2c819c309f8beefa4a9e5d3dd35033a9550c9091ddacf683ffb1dd71fc2d771e1e3f6f2d1907e74b0
SSDEEP 96:dqne+x09HY6gwIZsCYqhbXGPUXxmieykBI4zV8nR/eVGVncrw06xw:geaW8wQYqR2PKxQnIWQG6xw
TLSH
T193C1944525410192F76235FB50D1290B383382FBBADF6E5B91C0DBFA2D7E768825B1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58d50e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d50e.TMP
Size 3KB
SHA256 49bf06a1894841f038c05a875abd5670cb1dc304c3ad444d301ff1dd154075a8
MD5 db25955f1197787bcc1763155749aea9
SHA1 e3bf7f30af2d7637760a8b5c2809884a4220aaba
SHA512 5942105470b03f67b1c62fa6f156388bf299e89cc5044d625a9573fa44bd15cf848e3c84a112b8eb12a0dffbc917f48d5571007720548d8bb632e3b3226d1b70
TLSH
T1DA81600116014490F7B231FB90D1660B387387ABF9DF6E529190DBFA6E3E36D829B4D9
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 35KB
SHA256 4ba9970bec1b6c410b871fde69db4babc8f6da10083cdbfb529356bbc0e9a5f8
MD5 b03d9c8689774620f4bff23b58cdc8f8
SHA1 971b3a16f1afac8c5a712d19a16fe7b6266861bc
SHA512 2e13dd8daab27241a24560f4c3b0b7b1d811649c6877b0d95e84aa1c9cae8035c6659c5a4dfd7e26a5b324cab89f0fe98c1a0bf259d542fc271cf75f62f9f091
SSDEEP 384:DtLPuqieYU6tBeBbABeVp5ZnIrtJlJl40BjCMRG1f+7YnqC7CiicDoY+CIZACYAU:YtB7eonqLIgVcWzm7d8
TLSH
T157F278FB83B4463EED1152F86A182F1FCE681D32132C3C7689D5AE1687E1435E14269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 32KB
SHA256 84743df84f641238f4dde08dc6c07d5ecbac1ff918710fb1f4dc1d380e0851e3
MD5 8c773480ed21270b537f3aa4c8ae968f
SHA1 969883d1080789c3c46bee6b9365623fd91ae5a6
SHA512 4e56c3ce0b498b388e8ae639a7d14805f102be61d55c452552c5afa44e9f42a1d1a363dc34e72eb07c60581f233539df63c29ee31006a29471e40883193acfa5
SSDEEP 384:DtLPuqieYUNLBerioBer++oPQp3JrJnaR9DW50/iMg7YnqC7CiicDoY+CIZACYAq:J4Axeo/qLIJN+M4Re2v
TLSH
T128E258FF83B0463EED1152F86A1C1F1F8EA81932175C3CB58AD5AE1297E1436E04669F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 3a365761c3303a29233112f3f9b79bf00a729118a7cd9a3a41fba714453c26de
MD5 747f6f605d8ee1b7cbab6f4edd26e3bc
SHA1 16551615658c92a22fd4bc7b55fecf18c2842abe
SHA512 dae486fca2bfc00b36cb37ae050cc0e38be42874611e6072a2439c55796293322a1990897d0fcf7d29b8d83eb82efd17d086e6eb3c8a630a98c3b6ae38638790
SSDEEP 192:DDWWgIoJI27YnqCOSCiicyTnY+kuiCIZii/CCYANneki8g1AYAtTwjYPMXXa3bZS:DDWWgIUI27YnqC7CiicyTnY+kzCIZii8
TLSH
T1223258FB83B4863DED1152F8AA082F1FCE981935132C387689D1AE1797E2475E14179F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 32KB
SHA256 c11574c47a24bbf21a2cc8e84334460fc6ed47127b89eeed2676b1934d3d41ca
MD5 902157dd0558ab09f027117019f27a79
SHA1 84a57ee26491cad43de2a9487b85631c4b8456f5
SHA512 fcaa9f17c3b42c08a3099b3aac3b4b19a12f894ff9a6c9b1f9c48cae6727c4dc0e8cd2f777ffa26b6ae2f2caf30425b21ad5da28cf12e956235a01f97bbde912
SSDEEP 384:DtLPqieYULBerioBe++oPQp3JrJnaR9DW50/iM0O2fj7YnqC7CiicDoY+CYAWgaK:K4yxCcqqJN+M4oe/C6H
TLSH
T1F7E258FF83B0463EED1152F86A1C1F1F8EA81932171C3CB58AD5AE1697E1436E04669F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 20KB
SHA256 6e71cd91870f9456c523bb1dad12499b7af88a3ca4715cbdeea102899958c466
MD5 b4ad43472698240a2ac13c2988adcbe3
SHA1 aa280255c163e0c1970d994673fc135bbba35d2e
SHA512 40e2865691a0e59be8a95da95d4e3c3bfdcaa76841bd7eec6346faadd15b672398069a379f68fbed6dace07f9db4c00a1cdebf243000c6f21832e25917a0436a
SSDEEP 384:DDWWgIIepG6tBeBbAB27YnqC7Ciicy5Y+zCIZii/CCYAeWg1AYAtTwjYPMXXa3bc:htXCjO3A1Rg5
TLSH
T1B7925AFB83B0463EED1152F86A182F1FCEA81932131C3C7689D5AE1697E2475E14275F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 37KB
SHA256 c4fe041db44c580c2a3dfab77989e0b34cca27f11166d250e88139fcb10ea913
MD5 52cbd9470028f4270b2e831aa1920332
SHA1 82be61698901a3adf5056bf8067c3befb14bc272
SHA512 589c5f178560c1b87c6a6d883f55896a904e008cf459598824106455e8521227f2fbb8cfa0e7351734b961b4195854f6fd6eb33248ee8d3bd795a6ed71bd332f
SSDEEP 384:DDWWgIIepG6tBeBbABeVp5ZnIrtJlJl40BjCMRG1f+7YnqC7Ciicy5Y+CIZACYAP:htB72onqxIgVmWzDFE
TLSH
T1720387FB83E4463EED1152F86A182F1FCE691E36132C3C7689D5AE1683E1435E14269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 dd277793255d7ebe55527f628e8db622b794726b62b2d281c479a484cc81bc3e
MD5 3f13883b8ce4703031e5022603ad7069
SHA1 96b323cf54becd6984de652d857e029dca1f07af
SHA512 9e632383bc618aa0871f32f307aef6e1f6e93fceabd7b18914c4ac5b750e6735d6274a9c5576671d60a380ca78dd27bdcd2e039ec2b112b70e939a97f75be4db
SSDEEP 192:sxZq/yHkKOMl8Mky/f0sTb10rIup0xHW6+WNcGS/Yz2lgIIgUoJ:sxZqEMy/f0sTb1CEHb4/bUM
TLSH
T16442D9526A38997B8CCBD20DFA457B53D6F9057392940E48AAFCD60C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3fbd0e9bff7a38846e8ae3f8012f5aa3f994cae0b5e7ec360a976f18696b420b
MD5 c7b6e1a68ae97ca4e0005161d667b40d
SHA1 d836960f6164490cb0e04a040a4cd4d20a9bc31d
SHA512 280dda16a2e7c4523a7c4a754f2c141544269d80c98f810e4c36857da5152d7c0d0f7ba2c5dc8d199476199fe66627ca60ed6e8812c5e0a87140416cecb9a7e1
SSDEEP 192:sxZq/yHkKOMl8UQ2Tky/f0sebK4rIupFxxHW6+WNTl+mh+A+GS/YzpggIIg5PoJ:sxZqyq24y/f0sebKm1HbTQxA+/71M
TLSH
T17952D952AA38597B8CDBD219F945BB53E2F5157396900E44ABFCCA0C04E7BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 e48330058564b30b7798e5353d60febd4b2af3407164598bde6b8cdfbdc184c9
MD5 1e18346972f377bcbb9ed20955b01335
SHA1 52e12c86675696aa6e185b1b372f3a85cb8573bc
SHA512 b34cd472a7ba61d0454e0a14240f28e30394e50d7b919e39c60dfa79f5128820613b8220092491ca7af0e56562f7babdf2b863a4db933b692292130e5aa96ff2
SSDEEP 768:TWW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjsroITi1YC:TWW7kf0Wvqidau1jaa5LA3j3yC
TLSH
T180D2FA3B680CCB7E4F841E5CEC266F976ED801CB66988D5447FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 1KB
SHA256 0f5f3e2c7216bc9c2e10f710747e0385e3363bd36203cad7281f0a7ec74decde
MD5 8d2120124617f4faea41e0a849e744c9
SHA1 0ec76eb7f5626e33a1290bd157e799fa92f5d262
SHA512 fbf64307668341b74eea05fa779f50d13eda15dca437b221db2849e1cb8e0c87edb8ffe2d774791e77368bcf63d6861233876e85c12640c035af252c51c8bdf6
TLSH
T1DB210C194DA08C2FF5A841B615BBA5E8733189DC5321A7A3582C22312E1A69A288B1CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cf4e7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe5cf4e7.TMP
Size 1KB
SHA256 83824a0f9cb2894c448e4a8ddb55a290e8230446abbbe3fe43e1d9bd02408e57
MD5 b63db996a8725a04000c445f570ce038
SHA1 0ab4241d2bd1a9332b6c4cf66eee99f539339994
SHA512 bc47733bd62604cf4a41224e46baa02949232511e3fd7a15f3f032c4a1de51319e9c04a52c3c75fb33b36cbe5e7af07eddf7b40773d0cd9cf99195f4a78d6e5c
TLSH
T1C421129546E14D1FF48491BB09A7B4F8B33088005222B7A3683C263A9D356894E470CA
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 dc70b871607d68e9aa0179051d322101bd3eea40d290240041ee2509abd44326
MD5 6654891a3cb6f655975cac57954e6cba
SHA1 597c9bc19378cd6513ca84610de1432450749492
SHA512 b18d99c08694150eb45392887f424c3c822af6eb61c8543ba55f521f05060b54b60e72b28c0b6bdd454f518bddde776e4849707532d0527f5825be74785dab90
TLSH
T194E0D8BB2EFB2824AD6F97D538B155A08185395CD518EC4E3167A29770F27512406C21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 5b75fcade246c35196e7e226373f2707e21fcfd8b66c3be5ea6bb2f924c2edd2
MD5 6f23ca6945f53e469ff537e1bed45327
SHA1 b06d4437d54728b7100c52f861116132733594bf
SHA512 d52ce2df79f3540abd97df6bd49f354bf6785cf034d4b9a95c3b894fdb2da967c78ee6026e6df2999029c09cf644750333b5165f640e3b6dec242a519605da2d
TLSH
T1C9A0022432809A12C65502B060D1A14477656E700205121978F00E5B8F50544624A404
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6d177c0d8d73f50f691444f2176145d13b3c07f60507d980ba4a2290b0b6a071
MD5 5a0cd1eca1136eee0cec8bb0f2ffbf86
SHA1 5234aa4b1204451f45167123ccf9b249b17725b4
SHA512 6ad04c176e1134c34d1917e10347f7aed33636e0cfaa3f1d5a92a721ea14dcfff414984e56dfcf77dc7f2a53f4f0a66c0333d657e6fe24be8f058c46a7858391
SSDEEP 96:KIbCKcvdWKuMy16zGqY84o0Uh7qSoKCtqgouyyRg70gKF6l:su9pRG
TLSH
T1DC918405323B46127CBE3D599266C6768E8236633818A46F7FB811751E6BE110FFD8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9bb3fc1-8d6a-4fd4-8f7f-3810a05f7066.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d9bb3fc1-8d6a-4fd4-8f7f-3810a05f7066.tmp
Size 22KB
SHA256 41d7425579d647887df4b3dcad99792016f6693f9de05ce3a861a12fcfcbdde4
MD5 dc2dabfd9cbeadca467ec254d1aafed1
SHA1 4a5d38d07a76caa5aebcefc35c08835cd3ca32c1
SHA512 ca1fcd861919d31a9d216a638f4f4da142bc8c2d47a311ba2b69f53a8773e46bbb7b0f3dae3548ed3d391ebb20e5ba1de0b8a986ea1a088835558e6b025bc3db
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/us:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAB
TLSH
T15AA2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 35608db75fc303b73070e88603c632691d7799f546db044b629d011efbe2dd7d
MD5 7b2629e36ccbc22e5a077698a332c1e8
SHA1 787f699827ae052ec77a9040923327f1b2522a3e
SHA512 c93924bb800b87e2e016d0525d68ea04c0fa9b016d0eff7e239e0250899ca9eaab9ae7192aed749dcda29eeff7eb49851ff0bb80a6fdd53ca3bde0d5d469caf7
SSDEEP 384:9tNn/s3n9SfsNeYyggbGiGoJhvQOObjI9G6w7a:9j+9UrggqBcRQ29Ma
TLSH
T199929D32AC796D764D929194F48B3A175FF8417BE3842F84E6ECAB0C05EB6AC031351A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8917a640591458974b5ace769e1b93623940697adb91286c3b889ab32a1974d3
MD5 0afd7c31abb0b3f817f657b3f7f0fc26
SHA1 63ebf319b69a8f56f79de73d5bf34912104015cb
SHA512 909af8a53cee2e25b98664a4937b056a9e87bdfc13141ccccd77dd5b9ae7995e74bf9888de67e26ce90e190f75b89141a77ea861108ab33740c889bf5166cd6f
SSDEEP 384:DtNn/s3n9SfsNeVyggbGi5oJhvQOObjI9G6w7a:Dj+9UeggqucRQ29Ma
TLSH
T197929D326C796D764D929194F48B3A175FF8417BE3842F84E6ECAF0C05EB6AC031351A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ba6621af250194b6908949c9a2d6bea1a08ec69d7bdef4046576a5d149ef6789
MD5 42c78341883e6cc5780a04248da10233
SHA1 f6f82cf5ab35639b18c89366c54267cec6174130
SHA512 39bd647bcffc18981ec6da5cf73193e8312894f8f98eeb5227b48381f277d60514e750e49de202bd7068fde35498ec0d35bb8c0dcd20b0d5a3ff98fb572652aa
SSDEEP 96:1qONknQsjpfWQqGU5ih/cIPURHl8h4otop5+htD1BsPvvQod5WgzaPKwjcgH60Ns:MON364BAQmiUya1LW5GBPK/C6EaDGaU6
TLSH
T1FA02EA356C796CBB9EA2AE45F48B37175FD9117BE6905F40E6E82B1C00D724C230392B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 df5338410841d33b34f82f2daffb4248e0b3febe10a38c08499b2db4625b846c
MD5 216b30f437ae71153abf0624af23b283
SHA1 7199a6e8024247af2bae867c6adc67983711c13e
SHA512 9d085ad3c1177134b1ac2cf8db82d98070a6a752c2f9231d0138426e105111bf21527e8d8febfc2bf7d97ccfc86b3dc4aa469e5a42c93686ca0ac7156a75a832
SSDEEP 384:lOF1tNn/s3n9SuzsNu8TUNTUlIlVyggbGiGeIjoJhqQOObjI9G6w7a:kF1j+9J3wgmggqVeIjcgQ29Ma
TLSH
T1B0C229F258EB993ADD9D4753B77E2E124EBCC167B6805A40B3D85A0CCD961BFC302905
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b0545cac015a94eedc3729b02f1444b92d06ead1b2fa18a25faaf8fdcb566857
MD5 14f96e0091bbb0af230fb244c7b9ffa9
SHA1 96463e96ed784abff1ffafccbf4449b5f7c9cbfd
SHA512 e66e95f6c89df145870985f6202f5a8a4e479d10c193c944191a8344e18e9efd64b81de9f08420489b1f4de161dedf15261afadd5d3a43f1d615a29ca0018751
SSDEEP 192:zkONX64B2YQmiUyhLzc5GBPK/C6Cw0y+WwCqG9U6:IONX6eZ4YyhXQU6
TLSH
T1BC120A76BCB8AC7B5D92A140F48B36135FA9412BEB84AF41E6DC2B1C01EF65C230751B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2d64a381677118a27b7f74a727ba015280f0b3d12e8e61cad222baf27d19640e
MD5 a78a2215759e0224a9c217a16ee9e485
SHA1 ded42f9762a2953b0de66bc860ac6a151fe50a45
SHA512 ed80ed2223655e0e4a3b38de868ff233be85d5de6d33f503b65c98d8521cc5d11d90192c5e042d2f8fa735693740c21275982aa2f910f9d614a14d94f33b62a3
TLSH
T1EEE00192530000EAC5280330048327282BF3C03582B253874A1401641C137012E24B80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1806e6d791db53b8a101bf2d1b7f7cd31bdd56b1def830d63bc86c79f2951300
MD5 cf94426c9f8f174be66cccdbeee0532b
SHA1 39191a808ccac95138663645f8a655dbea5fd3ae
SHA512 6c6054a5de4ae031dd63e195f510a8ee88470ccf5467678d0413dd0af3449e65682f2b8d554ee12474222d29fa913fd8247428201cf0487f3b8aab4e33d72169
TLSH
T1F2E001A3930000AAC9280330048327382BF3C03582B253875E1401742D137412F24FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 fa5a00b7c1d1f57dd0b19a18c7db8fab1b7fb3d1ae7c82cb01ce4265c8cb8e95
MD5 ce77590d70a1136c6f15bbfc548495a5
SHA1 b942c9869b84b14a0b8fa00a296c3c5fdc42c301
SHA512 3b9788a529b803a8c1e49f04ca0612d08ea1d155680b5b1aaf2a41b4f9ae2824978da5334979e3ff29597a26bd6dffed7eaa62826ec6d3b18ab4e01244a93ebf
TLSH
T1D0E009A3974581AEC92947305583273A2BE2803582B257875E240A642D536412F24BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7c6c4d1660ccd5508941392649d6cc6d251775caf3ce3bb4ae8eb3bd3a9ac6b3
MD5 2461d30eda3296c2903e50e918539c3b
SHA1 0a050aa34ddd2bfca309d15248c4da2f9f7944f5
SHA512 ca9cf16edbe88805c257343cf69f56c44de61fce0c64601626e4c8f2f878ce8d2de58e1a5df9b6ed62550e473b4a45c8e65602f5a70987f3f7c3aa295d7120d3
TLSH
T121E009A3930001AEC9294330048327392BF3803582B357865E240A642D137412F24BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c81bdb2164d53ce680b9bf4a7596b68e49706090086671d8162927571fea6c7f
MD5 09c1c9d1f8a767ea938098cf12a175e6
SHA1 d8279b3e57756e31020d48a4239ff611aa12064f
SHA512 870be2d58780163aacd58ba6fd25f71c83bc324a10f9e2f2cc5e966f16c6cd242614f84e9db36dc80560a7d0e0a13a5e7d2133dd89b089c416f9c9c0b39d3db5
TLSH
T1E7E002925300009AC51403300483223827E2C02582725387490401601C036011E14780
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a835a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a835a.TMP
Size 392B
SHA256 fc18900d44fc81db80b532d9f60627c0f1fbe44cb8d325d287e82c299871696d
MD5 67004739ec04226cf8e7908ac4e4a41a
SHA1 b73fd834c960701c5d1b5dbb06188f5c857dc530
SHA512 033c8d8a6016784e51f656b0838a37400557feced9c44576d1db743ea57bebb14113a4bf895d2451a24ea868fb8d5b7a16bcc9ccb5b1b8eccc95fd87109652e2
MD5 SHA1 SHA512

Submit Download

82b0d80b-fda2-47e9-8cb4-21617068700b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\82b0d80b-fda2-47e9-8cb4-21617068700b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4b9e547351d8a8853686371e29a5fb50ac7ba895a0042c91161bb650c6cf75df
MD5 784ea9c242ac35bc2e38a0eba8f707d0
SHA1 bc8acf89352be38f95cdbff5597940e9cc59f0d0
SHA512 dc2b32aacd68a0976f0aaf0e021bd1e752c63f29dd0f95c28edd4ea7aaf3d7a4d1a091c3edb931eb463623a87ca91370c72bb0f44e6a673253bc8afef77bc09a
TLSH
T1D9412798A6F91108B3B76F5A9BF2A4AD547FBD772F07D05E10110D8F0A22B40C962B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download