Resubmissions

20/07/2026, 18:56

260720-xlsbkady5w10

20/07/2026, 18:46

260720-xe4e9adw6y10

Analysis

  • max time kernel
    576s
  • max time network
    894s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    20/07/2026, 18:46

General

  • Target
    The Hell Virus (2).bat
  • Size 272KB
  • Sample260720-xe4e9adw6y
  • SHA256 c61a5e0c2c9de302b0b6f852b6c3642d6c4ac2fe3489cc4ab4156b6b6eeb3121
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: KillMBR

    KillMBR is a trojan that attempts to overwrite the Master Boot Record.

  • Detects KillMBR 1 IoCs
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Executes dropped EXE 7 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Drops file in System32 directory 1 IoCs
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Command and Scripting Interpreter: JavaScript 1 TTPs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 61 IoCs
  • Runs regedit.exe 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 5 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 50 IoCs
  • Suspicious behavior: SetClipboardViewer 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 40 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\The Hell Virus (2).bat"
    1⤵
    • Executes a command shell one-liner
    • Suspicious use of WriteProcessMemory
    PID:672
    • C:\Windows\system32\cscript.exe
      cscript x.js
      2⤵
        PID:3908
      • C:\Users\Admin\AppData\Roaming\MEMZ.exe
        "C:\Users\Admin\AppData\Roaming\MEMZ.exe"
        2⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1612
        • C:\Users\Admin\AppData\Roaming\MEMZ.exe
          "C:\Users\Admin\AppData\Roaming\MEMZ.exe" /watchdog
          3⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:4004
        • C:\Users\Admin\AppData\Roaming\MEMZ.exe
          "C:\Users\Admin\AppData\Roaming\MEMZ.exe" /watchdog
          3⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:3132
        • C:\Users\Admin\AppData\Roaming\MEMZ.exe
          "C:\Users\Admin\AppData\Roaming\MEMZ.exe" /watchdog
          3⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:1744
        • C:\Users\Admin\AppData\Roaming\MEMZ.exe
          "C:\Users\Admin\AppData\Roaming\MEMZ.exe" /watchdog
          3⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:4372
        • C:\Users\Admin\AppData\Roaming\MEMZ.exe
          "C:\Users\Admin\AppData\Roaming\MEMZ.exe" /watchdog
          3⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:2672
        • C:\Users\Admin\AppData\Roaming\MEMZ.exe
          "C:\Users\Admin\AppData\Roaming\MEMZ.exe" /main
          3⤵
          • Executes dropped EXE
          • Writes to the Master Boot Record (MBR)
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:3468
          • C:\Windows\SysWOW64\notepad.exe
            "C:\Windows\System32\notepad.exe" \note.txt
            4⤵
            • System Location Discovery: System Language Discovery
            PID:776
          • C:\Windows\SysWOW64\Taskmgr.exe
            "C:\Windows\System32\Taskmgr.exe"
            4⤵
            • System Location Discovery: System Language Discovery
            • Checks SCSI registry key(s)
            • Suspicious behavior: GetForegroundWindowSpam
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            PID:3376
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/memz-malwarevirus-trojan-completely-destroying/268bc1c2-39f4-42f8-90c2-597a673b6b45
            4⤵
            • Drops file in Windows directory
            • Enumerates system info in registry
            • Modifies data under HKEY_USERS
            • Modifies registry class
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:2492
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x368,0x7ffe28ffc188,0x7ffe28ffc194,0x7ffe28ffc1a0
              5⤵
                PID:4884
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,3415672243956619258,18055371838621026767,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:11
                5⤵
                • System Time Discovery
                PID:2816
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,7449390302097275146,5032406515330288619,262144 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:2
                5⤵
                  PID:3044
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,11717506427391020095,1830649167143084412,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:13
                  5⤵
                    PID:3780
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,12635823007638912702,1280733141095246702,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
                    5⤵
                      PID:2612
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3544,i,12909793810493271400,2943320601916266051,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
                      5⤵
                        PID:1564
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,5383105806004034375,1280606828794141559,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
                        5⤵
                          PID:4912
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,18381125106408782776,9066334528494290667,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:9
                          5⤵
                            PID:4716
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4260,i,16609897210187209599,15709125325492279786,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:1
                            5⤵
                              PID:424
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4580,i,1930450278489767160,2054684421516364224,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:9
                              5⤵
                                PID:1976
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5548,i,17111668017089536126,4339725773364103330,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:1
                                5⤵
                                  PID:4520
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4188,i,9315496186474427598,15162083109089893525,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
                                  5⤵
                                    PID:4576
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,8848361586957976834,10493910714130853814,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:14
                                    5⤵
                                      PID:1880
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,16786805474896948898,15223550617998280509,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:14
                                      5⤵
                                        PID:5060
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,11605378775959888313,14004633146703754840,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:14
                                        5⤵
                                        • Suspicious use of WriteProcessMemory
                                        PID:3944
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                          cookie_exporter.exe --cookie-json=1140
                                          6⤵
                                            PID:4912
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,12617262325767470342,9117234319388052933,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:14
                                          5⤵
                                            PID:436
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,12617262325767470342,9117234319388052933,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:14
                                            5⤵
                                              PID:2220
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,9471002432981993297,8124058441135421039,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:14
                                              5⤵
                                                PID:1460
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,7123607788782933955,2332672427782144838,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:14
                                                5⤵
                                                  PID:4352
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,14425821514805068188,3988597621463540898,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:14
                                                  5⤵
                                                    PID:1704
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,391412074109317963,2664172480461298091,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:14
                                                    5⤵
                                                      PID:4632
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,6760232395113227449,14064856456136482803,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
                                                      5⤵
                                                        PID:4912
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4512,i,18067394378854704553,15352556271752458944,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1
                                                        5⤵
                                                          PID:1060
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6268,i,2063728694553138272,624375677808146550,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:1
                                                          5⤵
                                                            PID:3792
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=728,i,1542935501317883411,18311734496747287304,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:14
                                                            5⤵
                                                              PID:3984
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,6016143222726707864,9678796855240668298,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:14
                                                              5⤵
                                                                PID:1628
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,2082644663277894175,8062186613564106599,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:14
                                                                5⤵
                                                                  PID:1976
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=3504,i,2392656250867044043,7390782111011953685,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:1
                                                                  5⤵
                                                                    PID:420
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6488,i,2402731802118509718,1433403121260659702,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:1
                                                                    5⤵
                                                                      PID:4912
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,11992468418441634233,6340641084489443975,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:14
                                                                      5⤵
                                                                        PID:2728
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6132,i,6798149176803903456,13561282886900579324,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:1
                                                                        5⤵
                                                                          PID:5308
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7160,i,641978788228457470,955093421855075798,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7080 /prefetch:1
                                                                          5⤵
                                                                            PID:5396
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,6149953476630230969,6122429885438113267,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:14
                                                                            5⤵
                                                                              PID:5644
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6480,i,6727262044576534885,13688633279350804181,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
                                                                              5⤵
                                                                                PID:5456
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7288,i,5097218334785089535,15458040386695988026,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:1
                                                                                5⤵
                                                                                  PID:5280
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7392,i,1530434725538122846,9921219244468305208,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:14
                                                                                  5⤵
                                                                                    PID:5828
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7500,i,12453390917062416074,14356536096470782554,262144 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7456 /prefetch:10
                                                                                    5⤵
                                                                                      PID:4032
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=5732,i,13619919473242743167,7801700736285781064,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7532 /prefetch:1
                                                                                      5⤵
                                                                                        PID:5328
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=4244,i,13641006329817653821,16224966845674634782,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7684 /prefetch:1
                                                                                        5⤵
                                                                                          PID:3076
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5836,i,9085770552045451213,4311119020250569804,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
                                                                                          5⤵
                                                                                            PID:2476
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=6068,i,3116354460321332022,13988643196669707588,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=3356 /prefetch:1
                                                                                            5⤵
                                                                                              PID:2420
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7820,i,6595699831756718890,819106234781584163,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7836 /prefetch:1
                                                                                              5⤵
                                                                                                PID:3744
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,15261549825252331937,6783581647214996202,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:14
                                                                                                5⤵
                                                                                                  PID:6024
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,2304576138514542526,7192157032553901886,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:14
                                                                                                  5⤵
                                                                                                    PID:1728
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3972,i,430221650002051135,4647118499049075843,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:14
                                                                                                    5⤵
                                                                                                      PID:2796
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7764,i,5533405397686812284,17918374969528853966,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7768 /prefetch:14
                                                                                                      5⤵
                                                                                                        PID:5276
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=6732,i,5673257474875859543,8078127372937022540,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:1
                                                                                                        5⤵
                                                                                                          PID:4008
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7412,i,6704413154059348737,6229289260118918875,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:1
                                                                                                          5⤵
                                                                                                            PID:1568
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7820,i,5981659049119705262,5323462837422364185,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:14
                                                                                                            5⤵
                                                                                                              PID:6136
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=4000,i,10193967544615764501,7665489401354832704,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:1
                                                                                                              5⤵
                                                                                                                PID:3744
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8072,i,2478712163532959735,2067543700551333587,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8116 /prefetch:1
                                                                                                                5⤵
                                                                                                                  PID:4868
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=3704,i,3764630600840233366,16788724184392039682,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8180 /prefetch:1
                                                                                                                  5⤵
                                                                                                                    PID:5140
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=7444,i,16734452717257444855,722295904798616997,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:1
                                                                                                                    5⤵
                                                                                                                      PID:2612
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8328,i,2262654174536508269,2681527804028973946,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8292 /prefetch:14
                                                                                                                      5⤵
                                                                                                                        PID:1780
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8028,i,14531961042452862299,13554052853783307292,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8008 /prefetch:1
                                                                                                                        5⤵
                                                                                                                          PID:4576
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8336,i,7062747692966798597,6362338481106888759,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:1
                                                                                                                          5⤵
                                                                                                                            PID:5480
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=3244,i,10195472953899713515,4295875673009318580,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7796 /prefetch:1
                                                                                                                            5⤵
                                                                                                                              PID:3440
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8444,i,7885749123515840532,15978653858198840107,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=4008 /prefetch:1
                                                                                                                              5⤵
                                                                                                                                PID:1712
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8572,i,5116550346251856535,13638094339652471998,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8440 /prefetch:14
                                                                                                                                5⤵
                                                                                                                                  PID:2096
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8636,i,3685386708602878552,2477621260832218015,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8624 /prefetch:14
                                                                                                                                  5⤵
                                                                                                                                    PID:6604
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,9903961114767066377,6779022486260981199,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:14
                                                                                                                                    5⤵
                                                                                                                                      PID:7016
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=8788,i,10159808117286956897,4895772046739789002,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8776 /prefetch:1
                                                                                                                                      5⤵
                                                                                                                                        PID:6784
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=8812,i,8225224511424131659,8896915084862908004,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8820 /prefetch:1
                                                                                                                                        5⤵
                                                                                                                                          PID:5068
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1172,i,11212944293250175576,8655580454185339484,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8608 /prefetch:14
                                                                                                                                          5⤵
                                                                                                                                            PID:796
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=8708,i,7635776632790828031,8689239902855036779,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8596 /prefetch:1
                                                                                                                                            5⤵
                                                                                                                                              PID:1424
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=7564,i,6934912473282455823,14187014422938315074,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8576 /prefetch:1
                                                                                                                                              5⤵
                                                                                                                                                PID:6832
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=9096,i,53497826193927710,1834228726436637945,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8996 /prefetch:1
                                                                                                                                                5⤵
                                                                                                                                                  PID:5792
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=8916,i,8359433498548723437,17801451581692879317,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8888 /prefetch:1
                                                                                                                                                  5⤵
                                                                                                                                                    PID:1064
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=9048,i,757594618224279091,15974288269441076398,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9072 /prefetch:1
                                                                                                                                                    5⤵
                                                                                                                                                      PID:5196
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=8952,i,16205929605680410548,12425789755409664206,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9132 /prefetch:1
                                                                                                                                                      5⤵
                                                                                                                                                        PID:3712
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=8816,i,18119743450600737174,5315207032572601211,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9176 /prefetch:1
                                                                                                                                                        5⤵
                                                                                                                                                          PID:7056
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=9320,i,5606446902778159183,15766221613753939912,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9276 /prefetch:1
                                                                                                                                                          5⤵
                                                                                                                                                            PID:6540
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9376,i,12606033464059928689,12998619234925972682,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8816 /prefetch:14
                                                                                                                                                            5⤵
                                                                                                                                                              PID:7296
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=8968,i,6365084730299430429,5201002971466820081,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=8624 /prefetch:1
                                                                                                                                                              5⤵
                                                                                                                                                                PID:7984
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=8900,i,17959372795712449671,6053292311336302472,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9024 /prefetch:1
                                                                                                                                                                5⤵
                                                                                                                                                                  PID:8060
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=9320,i,7365354045299351530,7376058176178368098,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9244 /prefetch:1
                                                                                                                                                                  5⤵
                                                                                                                                                                    PID:7752
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=9560,i,7520862015000426003,14720422234021594515,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9564 /prefetch:1
                                                                                                                                                                    5⤵
                                                                                                                                                                      PID:7848
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=9492,i,10048910771704941348,12976051910690543464,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9452 /prefetch:1
                                                                                                                                                                      5⤵
                                                                                                                                                                        PID:7664
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=9780,i,14107465533849571612,18280425643668920193,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9756 /prefetch:1
                                                                                                                                                                        5⤵
                                                                                                                                                                          PID:6696
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9660,i,14302676074541646350,17951974588499310165,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9604 /prefetch:14
                                                                                                                                                                          5⤵
                                                                                                                                                                            PID:6324
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=9876,i,14576235526770053417,1465962437604181940,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9956 /prefetch:1
                                                                                                                                                                            5⤵
                                                                                                                                                                              PID:7492
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=9924,i,16945443837872954902,15632929697053635894,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9668 /prefetch:1
                                                                                                                                                                              5⤵
                                                                                                                                                                                PID:7564
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=9092,i,4213975701622357461,18257975998808310058,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9620 /prefetch:1
                                                                                                                                                                                5⤵
                                                                                                                                                                                  PID:2228
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=8992,i,11711348953423540234,2377567411290117563,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9624 /prefetch:1
                                                                                                                                                                                  5⤵
                                                                                                                                                                                    PID:5180
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=10192,i,3197202624941022986,4573785660077204482,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=9924 /prefetch:1
                                                                                                                                                                                    5⤵
                                                                                                                                                                                      PID:7952
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=9668,i,9997882350276149963,9680764270167766316,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:1
                                                                                                                                                                                      5⤵
                                                                                                                                                                                        PID:6656
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=10176,i,1261101645284785206,6767094609209324248,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10132 /prefetch:1
                                                                                                                                                                                        5⤵
                                                                                                                                                                                          PID:7964
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9576,i,7485666143780337186,13611741900383219815,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10376 /prefetch:14
                                                                                                                                                                                          5⤵
                                                                                                                                                                                            PID:5628
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=10564,i,11719726889197059756,2108503865080634279,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10584 /prefetch:1
                                                                                                                                                                                            5⤵
                                                                                                                                                                                              PID:5152
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=10904,i,5008155232540695530,15885248482165274550,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10912 /prefetch:1
                                                                                                                                                                                              5⤵
                                                                                                                                                                                                PID:1284
                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=10936,i,8176800502120489481,1808504198599733573,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10784 /prefetch:1
                                                                                                                                                                                                5⤵
                                                                                                                                                                                                  PID:7260
                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=10596,i,3365835113880518465,16049850858129488952,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10632 /prefetch:1
                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                    PID:7812
                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=11064,i,2085706591512985668,2873649884317597296,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10312 /prefetch:1
                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                      PID:568
                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=11240,i,10286147384149709708,16669119056190551639,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=11260 /prefetch:1
                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                        PID:3580
                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=11036,i,16551683632665668092,2735781569445933403,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=11156 /prefetch:1
                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                          PID:7452
                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=11092,i,16640685430025074310,5247241804941501723,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10320 /prefetch:1
                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                            PID:6512
                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=10488,i,14721944054032039214,2116557145433713349,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10520 /prefetch:1
                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                              PID:6484
                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=10580,i,14536074438993985112,12600831144694316743,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10352 /prefetch:1
                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                PID:3312
                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=10824,i,4758211619117160625,18299753983022602379,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=11156 /prefetch:1
                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                  PID:7588
                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10172,i,7835542302634903157,3379282220786935125,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=11416 /prefetch:14
                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                    PID:6324
                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=10724,i,8487209444093328371,10330277750566516268,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10748 /prefetch:1
                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                      PID:7524
                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=11548,i,4867276517206917356,1392923828653891222,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10720 /prefetch:1
                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                        PID:1232
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11384,i,11144786591688405611,5371269838552542553,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=11376 /prefetch:14
                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                          PID:2284
                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=11620,i,18045537590655428000,2600539197148043336,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=11624 /prefetch:1
                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                            PID:6284
                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=11788,i,8909086800024532550,12462088794734522439,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=11784 /prefetch:1
                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                              PID:6324
                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=11432,i,2884343973563899751,11060763348829960610,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:1
                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                PID:6292
                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=12020,i,8315958725405137428,12216012915970126875,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=11300 /prefetch:1
                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                  PID:7360
                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=12128,i,13136273380770858811,8192780877793948783,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12132 /prefetch:1
                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                    PID:8416
                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=12312,i,11833202603170344034,2315169119741714939,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12280 /prefetch:1
                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                      PID:8528
                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=12464,i,4244089253457507902,80247033777079990,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12024 /prefetch:1
                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                        PID:8636
                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=11608,i,14819352493389965347,16612506870981752523,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12364 /prefetch:1
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                          PID:8808
                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=10484,i,5267958057065296562,1006335598934477675,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=10964 /prefetch:1
                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                            PID:2264
                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11576,i,2137981337927014094,8357031502849579701,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12164 /prefetch:14
                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                              PID:7360
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=12520,i,16334354780857743381,1800049606132064539,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12064 /prefetch:1
                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                PID:8500
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=12208,i,14082895559644983625,16131143696165763449,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12436 /prefetch:1
                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                  PID:8740
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=12760,i,1494257024637663717,1868813384771687099,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12708 /prefetch:1
                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                    PID:8800
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=12208,i,14187064020685324471,1588742376609781190,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=11524 /prefetch:1
                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                      PID:9032
                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=12844,i,7476794469180211590,16253309469111114328,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12708 /prefetch:1
                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                        PID:9156
                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=12812,i,15864376701628794071,1606641085086903298,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12636 /prefetch:1
                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                          PID:8704
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=12504,i,10406738526934574886,6101034142543177612,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12656 /prefetch:1
                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                            PID:8680
                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12768,i,5425911914043430038,5531316148032372322,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12868 /prefetch:14
                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                              PID:8292
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=12060,i,8038691124870666682,882553636856243508,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12684 /prefetch:1
                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                PID:6768
                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=12724,i,9275232674320525226,7735582618355044719,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13064 /prefetch:1
                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                  PID:6356
                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=13196,i,18122016746440804028,4268499991595583189,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13232 /prefetch:1
                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                    PID:3596
                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=12772,i,8332232421513969463,6890355627422003199,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13280 /prefetch:1
                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                      PID:440
                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=12884,i,12094710841178648154,6626237249133395469,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12804 /prefetch:1
                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                        PID:6112
                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=12216,i,8425711412551013227,6262530654654322086,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12544 /prefetch:1
                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                          PID:8420
                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=13408,i,10321884734698621345,9998474086155036668,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13380 /prefetch:1
                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                            PID:8788
                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=13560,i,14577405241813313076,3860658271467745327,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13420 /prefetch:1
                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                              PID:3428
                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=12648,i,2235633521981355974,9835603696903072259,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13544 /prefetch:1
                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                PID:2312
                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=12068,i,3211239995099657608,18004280820385666799,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13696 /prefetch:1
                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                  PID:5224
                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=13548,i,9019859579300810132,17672550192647079269,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13756 /prefetch:1
                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                    PID:6268
                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=13352,i,15239089866503574756,4785395525298037260,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13664 /prefetch:1
                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                      PID:8212
                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12896,i,13498024819573202652,9279291997069689025,524288 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13880 /prefetch:14
                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                        PID:6356
                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=10272,i,12133900590896548725,14870552783687022917,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=12592 /prefetch:1
                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                          PID:5748
                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=13904,i,9121641538299812743,3222041677755069420,2097152 --field-trial-handle=2056,i,16484918414150138239,122795580925233547,262144 --variations-seed-version --mojo-platform-channel-handle=13868 /prefetch:1
                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                            PID:8236
                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=facebook+hacking+tool+free+download+no+virus+working+2016
                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                            PID:1704
                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                              PID:2728
                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                PID:5296
                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/memz-malwarevirus-trojan-completely-destroying/268bc1c2-39f4-42f8-90c2-597a673b6b45
                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                  PID:5416
                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=mcafee+vs+norton
                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                    PID:5276
                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                      PID:5792
                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\notepad.exe
                                                                                                                                                                                                                                                                                                      "C:\Windows\System32\notepad.exe"
                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                      PID:6020
                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                        PID:5940
                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                          PID:5528
                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=facebook+hacking+tool+free+download+no+virus+working+2016
                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                            PID:1520
                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                              PID:4500
                                                                                                                                                                                                                                                                                                            • C:\Windows\SysWOW64\regedit.exe
                                                                                                                                                                                                                                                                                                              "C:\Windows\System32\regedit.exe"
                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                              • Runs regedit.exe
                                                                                                                                                                                                                                                                                                              PID:5244
                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=minecraft+hax+download+no+virus
                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                PID:3772
                                                                                                                                                                                                                                                                                                              • C:\Windows\SysWOW64\mmc.exe
                                                                                                                                                                                                                                                                                                                "C:\Windows\System32\mmc.exe"
                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                PID:5076
                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\mmc.exe
                                                                                                                                                                                                                                                                                                                  "C:\Windows\system32\mmc.exe"
                                                                                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                  PID:3448
                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                  PID:5588
                                                                                                                                                                                                                                                                                                                • C:\Windows\SysWOW64\mmc.exe
                                                                                                                                                                                                                                                                                                                  "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                  PID:6140
                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\mmc.exe
                                                                                                                                                                                                                                                                                                                    "C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"
                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                    • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                    • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: SetClipboardViewer
                                                                                                                                                                                                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                    PID:488
                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                    PID:2680
                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz
                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                      PID:6884
                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape
                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                        PID:6148
                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\calc.exe
                                                                                                                                                                                                                                                                                                                        "C:\Windows\System32\calc.exe"
                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                        PID:6224
                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+download+memz
                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                          PID:7968
                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                          PID:7836
                                                                                                                                                                                                                                                                                                                          • C:\Windows\splwow64.exe
                                                                                                                                                                                                                                                                                                                            C:\Windows\splwow64.exe 12288
                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                              PID:7932
                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                              PID:7720
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                PID:7612
                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=internet+explorer+is+the+best+browser
                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                  PID:7484
                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+download+memz
                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                    PID:6812
                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\Taskmgr.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Windows\System32\Taskmgr.exe"
                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                    PID:8172
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                      PID:7468
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                        PID:7564
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+send+a+virus+to+my+friend
                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                          PID:7708
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+get+money
                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                            PID:7444
                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                              PID:212
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=minecraft+hax+download+no+virus
                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                PID:4320
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                  PID:2284
                                                                                                                                                                                                                                                                                                                                                • C:\Windows\SysWOW64\calc.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Windows\System32\calc.exe"
                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                    PID:7572
                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://pcoptimizerpro.com/
                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                      PID:8100
                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\control.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Windows\System32\control.exe"
                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                        PID:6448
                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=internet+explorer+is+the+best+browser
                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                          PID:4280
                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+get+money
                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                            PID:8400
                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\SysWOW64\calc.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Windows\System32\calc.exe"
                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                              PID:9120
                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                PID:2584
                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:8496
                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://play.clubpenguin.com/
                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:8676
                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\Taskmgr.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\System32\Taskmgr.exe"
                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:8368
                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:8672
                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=internet+explorer+is+the+best+browser
                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:9204
                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=what+happens+if+you+delete+system32
                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:8984
                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\SysWOW64\control.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Windows\System32\control.exe"
                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:5060
                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=what+happens+if+you+delete+system32
                                                                                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:8440
                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=john+cena+midi+legit+not+converted
                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:5224
                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
                                                                                                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:2680
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\System32\cmd.exe"
                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:8984
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:8736
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\calc.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Windows\System32\calc.exe"
                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:6368
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz
                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:9076
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\SysWOW64\mmc.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Windows\System32\mmc.exe"
                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:7852
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\mmc.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Windows\system32\mmc.exe"
                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:6432
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\SysWOW64\mmc.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:4876
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\mmc.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"
                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:8288
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\cscript.exe
                                                                                                                                                                                                                                                                                                                                                                                                cscript x.js
                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                                                                                                                                                                                PID:2704
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:1408
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                                                                                                                                                                                                                                                                                C:\Windows\system32\AUDIODG.EXE 0x00000000000004C0 0x00000000000004EC
                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                                                                PID:408
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\sihost.exe
                                                                                                                                                                                                                                                                                                                                                                                                sihost.exe
                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:5660
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                                                                                                                                                                                                                                                                                                    explorer.exe /LOADSAVEDWINDOWS
                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                    • Boot or Logon Autostart Execution: Active Setup
                                                                                                                                                                                                                                                                                                                                                                                                    • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                    PID:5620
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                                                                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                  PID:6752
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                  PID:6900
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\ApplicationFrameHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\ApplicationFrameHost.exe -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:6832
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2012.21.0_x64__8wekyb3d8bbwe\Calculator.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2012.21.0_x64__8wekyb3d8bbwe\Calculator.exe" -ServerName:App.AppXsm3pg4n7er43kdh1qp4e79f1j7am68r8.mca
                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                    PID:3900
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                    C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:2480
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:2056
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\explorer.exe
                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:4788
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:7432

                                                                                                                                                                                                                                                                                                                                                                                                          Network

                                                                                                                                                                                                                                                                                                                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                                                Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                blocklist

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 105KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                protocols.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                autofill_bypass_cache_forms.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 161B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                edge_autofill_global_block_list.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                v1FieldTypes.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 509KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                crl-set

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                CrashpadMetrics-active.pma

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1024KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 624eaf606d0845d9ef3f81652f29a5b8489b6543deb1e4fd4903c415238ee9d9
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5116dd98c2b23ba5b09db7653ab553aa29b175fa64b8b9ed64ecd21beb5831c6
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e8c11bffd04a845e6747271563ae4a847b510ffe734f41902fbd4b2f062eee45
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                LOG.old

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 352B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 041bf463578ffa683dc10f13c3f053ae39d798cab02ae69c37504aec47c56eec
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                LOG.old

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 334B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ef30db6e9fbfe9b0ca37ad830d1adf99a073ff494795dfda32f30bf5f1a95d0b
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 158B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                BookmarkMergedSurfaceOrdering

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 6B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                f_000084

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                f_000086

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 82KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7a6f21721cf7a54d8c517ee4b13105dd9cebefd69c73df6b5b0bcbe6cd17f493
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                f_000088

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 436KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 0b320d2cf00e9215763a5377904e2301b2edb7a5d299bd319259714cf8bcd9a9
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                f_000096

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 513KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8ac3cdcf2d6abc1e29d9cfb7b520ce59ed2a64d32707e4c701b9ba0bbefb6c26
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                f_0000c4

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3096c47012a7255879304054c9d8d260fd67a0f4b3fdffae385fda6d519856e6
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                00df775de4068bd0_0

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\00df775de4068bd0_0
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 354B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e37885da1640710908af60ff5a2d5cf76911f90e69b013fb27a1cdf435e7ba3d
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                00df775de4068bd0_0

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\00df775de4068bd0_0
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 354B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e06b1e967349a1730523e4d0c7ab1c80cb61b1aba45f36bf32cc7ea22100550e
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                16fa893da4cafe8a_0

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\16fa893da4cafe8a_0
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 324KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a1f01458464b5f73dcab1cced49d73eb68ee04fc5aeb71c62764e957f63e0cdf
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                ca936d71e1dfbdd3_0

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ca936d71e1dfbdd3_0
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 324KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d66cb6d64f2112531ed313542e8b87793e6aa42b112b194f4f746a5d601c051e
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 57ffbb75352668b015cdff6a3572a7205d8c9389b39b7ff770c8af809b82ae1b
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5385c8694aa7b18e500d8d25714754b929e91391856be74f3cb9769c701fa952
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4eef3c18c04b592186975381fbe1aa8f95ce8cd83b2a2580f55b88d4092ef0be
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7884e0a0e51786306ef749790d4f0b17bd03d55566a765c6f732c90a22439471
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 87865d003087c6ac96b69b8335b9c4c50a8cdea1d2cc6da68f107ce1b21bba28
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3bc7ac7d2ad2847a15e48667b8034e815248cc18bf0d7a72c89d5d782a980f0c
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 678f7fde30b3dfa3c37733fe91bc6e67d10721ce3f363245cb1fb3c873d600ef
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 cd8a935f393b9b668d9d6f86385c89fa6027968dc05acc7a75458b0cf1e95df9
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8ee46de97cf40393228ab0d48db0f7b349b3aa75e390dae24bff8521693c3ffa
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 15c8d5f0c5658ea015071d4c323b4d285e66c12d3dc6fec5cdaf10a596bb5b6f
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3249979e15d4a74a8301c6844196d8c6f64f5fa95851b752faafbd401bec9d05
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 0440877918c88f6fae3e06c04b4d5103677d9325d37f8c0e6b8fd7b522501c29
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3d4dcc2078ee7228702dcec5495e23ca17e6b9b5fe18d6f0cdd36bcb7fe7843a
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7614c4a834d568979bc22d0a00f27f8f7fd1fcb811e7a83a4a057b22aa073246
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 063f6cfa633018035594e9e20ea4e2fd0dc3b01159c6484c3a699e118d6c49ed
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3dab567d58df61a0269f14eedd96a44552590adccab6ab71564e75b0844aa2c6
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index~RFe59b1c2.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b1c2.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 79bf04945ebf4bc4c0659e4bdf98fb600dc9d6f3913f6db8d2383016d517a509
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                SiteList-Enterprise.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                Edge Profile.ico

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 573c31de6cc27e38b720549b1a7ad5d1dcfeb6358a56cd5eff463f3eb4368f25
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 682c11ee18df7e374d780dacd647b881879814ca5930aaef13a65a7b5520d932
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7eebbfd1628700434ace724c4058d8609bf804fd9fec25b24dca0c6a1a6b7daf
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c7b9b2a076172bf91306b7e9b60f2329b5324ef8f21d707935009d428c619f03
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 233058ba2765069275069118b9719da66e47a5f60f22da9a6a9e0efb653ef601
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 111B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7fab3511f7fe8f5c04f5b70602468fd8fee05c9b8114eacd3a36f0ec77a6d85f
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 54d290653ba0dc238aaa57eb830b2f4a769acf9d270c1193678c6a7801947b97
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1fa4ad9ef774c41448ee19c3b0fee68383ae3444647a573ee83b4b45e54b45f8
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                SCT Auditing Pending Reports

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 89d5722fcc8f05453799263067affedcaa512d3ac13cf990d742b16684461b89
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1a4912c45ac94ce55a50e5bdb52f0f67a1c54b3ecdb041e681d69deca9ec8121
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ebb06a2621c798bfcd8d6dbb1363272521a0783eecb4ef395a2ea2ee14a19073
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 94b6ca595e7155ae96bb033b3c66f0bbf791996fec367db45b7c3161f034fe46
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 36KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a351bf49bd2a03196a949509601e11549149829386d16ef39f0c3a496e083f30
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1927bbd8-f4f8-4811-b807-9378a5e80acf\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 113bc52cd6e7a1f42421468acf479809128f889d5806fdb2139327a25e5532fb
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index~RFe5df55f.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1927bbd8-f4f8-4811-b807-9378a5e80acf\index-dir\the-real-index~RFe5df55f.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 70ee7caa04fe8b66428e666494ba40216a90e3dbb3ba941d9fce9b67ccd156c7
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 371B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3f0adae7b6181b9a916b16ca2f4fc5196956f24203511d6673a5972182a2904d
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                290526ef7f01a7fb_0

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\290526ef7f01a7fb_0
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1023KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 26249f80afe284e8d0753c25ed272b8855b11bc687976ed6efb3eb7fa64b43e8
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                aa7be197645fda04_0

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\aa7be197645fda04_0
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 255KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 74dd057435af1b72b910a1110fae88b6a891b7a824a78bdc90de91d227ebc0d2
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 898a65d6c40d59b0c22df88b53e2fff7580624ca7a65cafeba69b96a76eda7d2
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                sync_diagnostic.log

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a6e4e0bbf0403b0ea60450235bfe8874aa51bc5770724b522811e7f048becc49
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                domain_actions.dll

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 83KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                data.txt

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.17\data.txt
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 149KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 fac5ec341b2f4b9c98a8bd7ec852589ee81e4938812666568752f36ae4f115ab
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                b8c4fc9f-a557-443a-aa47-9fa5c55e5342.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b8c4fc9f-a557-443a-aa47-9fa5c55e5342.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                office_endpoints_list.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2a3aa8beaf6b6c737bb98af310e7dddc50288a8bb952ef27be5fb4ab91d99270
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5e67ecfad000c7d1721f8b746e3b6c06cb7ef9e7eb14ea8c9c64dd19edb61ea0
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a72def74f10d81b8d1b5fcd1e51a9f6ca6839140ae20464a8287bc1b0561ca4f
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 037ead174561849e21f2ffa53cd437ca75b1909bbaca05666fbda54490654195
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7e0ded690faddee037605532615e9e06950ca7453ae45d2cdbf4483d00f9b918
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e8dd7fbdecb5ba663a90843758492bc1c96f889fcdd3d913ecd66eb94a48c6c8
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c78868bc734fea854922355b694e988bcdeae4c381a9c4081ebe77082025ae42
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 31291b1d3823d6f531fae5ed44e8ee0723be6921f0f7c9d90b794004f5deed54
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e0bd89a290cb0a4dd003269473c2eddb881769ffe418bea7480e93222e96d739
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 84176e28d040bd67ee90a0b5484f2fcf7b94848f472d1e6d40cd30ef903e5e49
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 aae071f2613756ae04d08dc35d2df0f94f941c225b62515f7aa276bbf8fb6f64
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c7ac74f864f0a06f0818fbeb019226922e623675c5224d6db240e93ae67200a3
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ed3349621f09d27ded4347d71c4aabfa440159915a56518d8b0c797d63d72e44
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2447b4b6027db51c041d7abbaf938ada7534a032ac8c743ecd07168df62f4906
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 509bec6ca23deaad348eec061a492e6addd5ec1f4d36e43dd00941013aff4b3f
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3c77ba0513f5fcdec722d44d94f097fab1cbfc3b292717359df222050d85f9f7
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 09d18631e75b2ce47d060f01b04fce376cd0da5a2893d04236b816d4d731f187
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 da3c22c2cb1d2d4adf0c7a7e416ef2b7bafebde5677e2191246b244be11a91a8
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7c80b520d0ba5645c3bc4de6a214ad938b57d3b8d654504b095f0022fea4e4e7
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3bff157c5e1423d70761a9957ec4cea3028d64f92586c3b2d522a575f26edaf3
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 dccd001d2ff2c909676032e9d8e88f74e73d14fd25abbc7a60fa4da061363eff
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ff2348f35b8752ee2849dcea003fdda411440c6c49818ebebcfee7dcef44a219
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 9f395fe1212385c0732ee4a503f5bf93730f69fa2f3f3099da5fcee2d8235945
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ea5b4bf2702714da82cd611609a365590d09205f4da166cc4432bf5a63f281ea
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 31cb4848ec82185321a890ddd5f92faf453a55c8fecb670b25c5b05393364103
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 62fd23fa3f84c1e8a0fb08cac512035e5a21df5b60afc014ca8d5c82baa5090b
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 76823299f0fc5e9dba8af1b57bc0d1b5d3b4edae04503189864d3fad9a97f975
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f6615d2fcc196f4d11a255ca177882653ce74e0cc59f66848b9179a7ce6c2c3b
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 9a43047c46cfe6ad82a22ae8f211435036955614b1a6a08cf570a46027b14783
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ce8d78004283aadb5d26e5b9accec09ed4c2496f6f103eb5d4db567b786ad8bd
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 319b8999a83aee50b8e60cbc96922b9ee038c7b2ec06b3d8902477cac6082116
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a02b129710cbf0489fe219097340422afd143c4ecfb6b6ac700c9ce7227690c0
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a64cf8a4882e43db804b8b9f1c06f9fa300861b319573cdd1f5ba01586b482e6
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 71f48b3f9cbe26799aa99696102c33202749a7468c16b07341d4a560904a1524
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 900168be9e98e045623f785896950f49904ed732725bea1ee539487777e0fc7d
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8d0f6e9113b1d06824e78bf14937074821b4432646b7107775fc23e6bae64b35
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 41a4476462dec286a6243c4c1a3c439ebd3e96eebf9db077d991bed9b023641f
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 af1dcfdbc44bc4b6171a27be627632cd2ac116633e3c7b90b369d8b82f1a5395
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4cfc481c9d06693c93a8b5114f172799dcbbc67e9775f160bf1b204d769349dc
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Local State

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 62ce69c19f7c4f7dfddeef45917b14d079a64c52a6ee32571826d8c20c7c8281
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 087b79aaca348b8cbe231e0ee5c9cceeb13c0e308d4437d69356de956244d019
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 18f812b460a7b8162e7e2f98f2e0d6a0cb4d4a83d16a9680b754654dda0be3d5
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f77e0f603796fae16a7bc674ce59120d475f45068959e83c84fc9d0a18ae3bf2
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 59259f356f02ad8f4db0bd57a5e7c33f45811e5767e923a2a505c069943d0b51
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 de6c54f65238eb077b4e16668a1f9b5515661a2873e5fd9c62c06306980f12a0
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1d41b4943aad400259dad6c231e9c8a21123c9957f647c93285d6763baafc3dc
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8dea2f7f931c531875b5a1f660be6bf3e0e1e3644c4fb2e261c00ad9ab0c9090
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c55962f531adbb54ab2942158880d2a4fcd7403574de7fdc4c2c9aaada1f59ef
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d5ac7a3baa544bbefbb4b582624261b04e1f5d5a6521c14b1c7531d9dcdf77ac
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e69f43b3e1b660add579f14e82d0152dd959fc4cf34a9cc6e618ddda4266acf4
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d9839ab4a0866e7b535aa146621df0227cb9e02a6d6ec8faae4fa7a035a2af93
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1f592f2d6cf336e5d577fdc52c7318f9a821fde7d4be6ca66d88f9fdf80ef175
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 457cfb4fb02f64abe50990a9854d6a314c853bf38d9d86217f1908145463550f
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d4c3c52a72bc81864e6249d1eaf0f5e3d8d394d4cb55fe425a8a2281fde0fd69
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 28e5421a59375ab6fd22cfd316a7220ca85e8f6b9ad0a70dcb51a4d216294a70
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5eea410aa4ea7338c0d84cbc7a34f9a0fa7e9db325b747c828492a5f6d648649
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c5eb0de7bbf79fa2a8337dd934955f7132f9e06efe20b2ae24e4e89c23e84185
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 37920004145fdff56a5ddd10b4a9ea91424c48713decada1155301151a3c192b
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 0fec7968a29a52d345c2ddd1482ac39cefc9cda90639fa016e47d4b6bd8537b3
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2882498e9dfab237238bfe329e0f6c64770669bad4ff20ff4b38006b74b365ae
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 75f5d0e7e3d7ac267a0a268f1bd86e322501e1016bb108afdefa71e97ab9cc9e
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 583fe644d25d304bc012809cd843dd654ce3a1eaeee6f546049fc2d8eae20a79
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 de534f7cc509354bd5a1d3a4909b2aa5684f16be227bd8eef90268bd7bd59d2e
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                RevisitationBloomfilter~RFe5a36ff.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a36ff.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 9b48087accb71dbc99759bdc74c6064d48dd4c94064f38b057f59207c668bebc
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                safety_tips.pb

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 163KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                typosquatting_list.pb

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Advertising

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Analytics

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                CompatExceptions

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 689B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Content

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Cryptomining

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 668B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Entities

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 68KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Fingerprinting

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                LICENSE

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Other

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 34B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                Social

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 754B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                TransparentAdvertisers

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 105B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Advertising

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Analytics

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Content

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Cryptomining

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 32B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                Entities

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 106KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Fingerprinting

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                LICENSE

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 66B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Other

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 198B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Social

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                keys.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                nav_config.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                b66f4282-7d19-4fd3-8113-e8bb2a927e64.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b66f4282-7d19-4fd3-8113-e8bb2a927e64.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 dfea2c73da56665a343e66022b74dcc78679fd7abf072d8be8d36a165be69f6d
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 757c40068c8b44526fedddbae76f4ef49d46e6f99e9c5b6ac7daee04f31c52bc
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 492B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2b7c607fd6a639934c6f7311f36aa760dd4a600f84b9f8e2d066832856488091
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 132B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 972B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 590065152acec5cf42dffc28eb04749514feaa899eb2ae04edce7d38a148fbda
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 372B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 21075672ed04fcc0ad86c96036a015a0479bc539f9eb22ed2ee07d5f51ed51d5
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 df444b5ed91161c5d2e84013e91e57a28fbbd1e4302590bddff64bc98663199a
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 252B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 852B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 142a7cc7a4933a976aae32a9d04e1758464486092207243f09edbbad51f1d934
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7ae3abeff1a7ac2b396b3e38dc9d2900c37a4fa3623cd6a74cdc34b502978149
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 923bb621b6d18617e36607e30a4140ce9dfc454d77c4d62326e61d694a9daa19
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 732B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a5548ca519cf47ecb420c8f1299a8a50517fa463459a704ef2ff17c4db35117a
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ae32d9950928870c88235c4c17204b62b83ed38c436c2dd65ff80e018454fd14
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 612B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 98d9b184e4c7220b5aaf7ae412b0c1b3f32e3dc4933afcf852538b8082017b9e
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                0cba35d8-91a3-4f67-b3f9-161b2d4012aa.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0cba35d8-91a3-4f67-b3f9-161b2d4012aa.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 13B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                iconcache_idx.db

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 adc32e22c0526afee7a532b1d85e17233cc1051b717935048c5d307fb05ca829
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                375ae890-bf78-4b8a-9b96-63e1136f2537.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\375ae890-bf78-4b8a-9b96-63e1136f2537.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                e2e9ad05-acad-432c-ac69-0ef7e158968c.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\e2e9ad05-acad-432c-ac69-0ef7e158968c.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                content_new.js

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2492_1168706034\CRX_INSTALL\content_new.js
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                48c2a3e1-bc76-48f5-81c4-091453d740e0.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2492_1276020558\48c2a3e1-bc76-48f5-81c4-091453d740e0.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 153KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                x

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\x
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3c8cea1a86f07b018e637a1ea2649d907573f78c7e4025ef7e514362d09ff6c0
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                x

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\x
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 45f18ccd8df88c127304a7855a608661b52b0ca813e87e06d87da15259c45037
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                x.js

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\x.js
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 448B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 aa01b8864b43e92077a106ed3d4656a511f3ba1910fba40c78a32ee6a621d596
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                z.zip

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\z.zip
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 44c1857b1c4894b3dfbaccbe04905652e634283dcf6b06c25a74b17021e2a268
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                MEMZ.exe

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\MEMZ.exe
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a3d5715a81f2fbeb5f76c88c9c21eeee87142909716472f911ff6950c790c24d
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_1002038822\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 53B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 b2574db59e08ca01a3df98d2fb2d691981bf8167321f9789caf4e456364a46fe
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_1065324823\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 135B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_1080932508\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_1110387550\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 160B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_1145984996\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 113B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_1642348807\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 119B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_1814436209\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 85B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_1917748406\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 165B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_223932039\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 135B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                LICENSE

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_225137405\LICENSE
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_225137405\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 79B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_248124116\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 43B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_351504349\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 177B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                Staging

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_377459617\Sigma\Staging
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 36B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_377459617\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 132B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_658326389\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 165B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2492_739875066\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 238B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                note.txt

                                                                                                                                                                                                                                                                                                                                                                                                                • Path C:\note.txt
                                                                                                                                                                                                                                                                                                                                                                                                                • Size 218B
                                                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270
                                                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                memory/3376-377-0x0000000005D90000-0x0000000005D91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/3376-381-0x0000000005D90000-0x0000000005D91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/3376-380-0x0000000005D90000-0x0000000005D91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/3376-382-0x0000000005D90000-0x0000000005D91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/3376-379-0x0000000005D90000-0x0000000005D91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/3376-372-0x0000000005D90000-0x0000000005D91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/3376-378-0x0000000005D90000-0x0000000005D91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/3376-371-0x0000000005D90000-0x0000000005D91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/3376-376-0x0000000005D90000-0x0000000005D91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/3376-370-0x0000000005D90000-0x0000000005D91000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/6752-1845-0x0000023BC5E60000-0x0000023BC5F60000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/6752-1841-0x0000023BC5D60000-0x0000023BC5E60000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/6752-1849-0x0000023BC5D60000-0x0000023BC5E60000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/6752-1774-0x0000023AB2F20000-0x0000023AB2F40000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/6752-1851-0x0000023BC6060000-0x0000023BC6160000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/6752-1773-0x0000023BC4720000-0x0000023BC4740000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/6752-1723-0x0000023AB1620000-0x0000023AB1720000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/6752-1866-0x0000023BC6160000-0x0000023BC6260000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/6752-1881-0x0000023BD6B70000-0x0000023BD6C70000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/8172-2523-0x0000000005CA0000-0x0000000005CA1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/8172-2528-0x0000000005CA0000-0x0000000005CA1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/8172-2527-0x0000000005CA0000-0x0000000005CA1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/8172-2526-0x0000000005CA0000-0x0000000005CA1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/8172-2522-0x0000000005CA0000-0x0000000005CA1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/8172-2521-0x0000000005CA0000-0x0000000005CA1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/8172-2529-0x0000000005CA0000-0x0000000005CA1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                memory/8172-2525-0x0000000005CA0000-0x0000000005CA1000-memory.dmp