hxxp://world cup fina

Analysis

user interaction
yes
max time kernel
448s
max time network
447s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 10:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://world cup fina
Sample260722-l945gsshle

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2204	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134291889028432310"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{DC7A2862-7D6F-4AD4-AFA3-75D89D0EFE9C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe
3768	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3768 wrote to memory of 4592	3768	msedge.exe	86
PID 3768 wrote to memory of 2204	3768	msedge.exe	88
PID 3768 wrote to memory of 2644	3768	msedge.exe	89
PID 3768 wrote to memory of 2644	3768	msedge.exe	89
PID 3768 wrote to memory of 2644	3768	msedge.exe	89
PID 3768 wrote to memory of 2660	3768	msedge.exe	90
PID 3768 wrote to memory of 2660	3768	msedge.exe	90
PID 3768 wrote to memory of 2368	3768	msedge.exe	91
PID 3768 wrote to memory of 2368	3768	msedge.exe	91
PID 3768 wrote to memory of 2368	3768	msedge.exe	91
PID 3768 wrote to memory of 2548	3768	msedge.exe	92
PID 3768 wrote to memory of 2548	3768	msedge.exe	92
PID 3768 wrote to memory of 2548	3768	msedge.exe	92
PID 3768 wrote to memory of 4212	3768	msedge.exe	93
PID 3768 wrote to memory of 4212	3768	msedge.exe	93
PID 3768 wrote to memory of 4212	3768	msedge.exe	93
PID 3768 wrote to memory of 216	3768	msedge.exe	94
PID 3768 wrote to memory of 216	3768	msedge.exe	94
PID 3768 wrote to memory of 216	3768	msedge.exe	94
PID 3768 wrote to memory of 3876	3768	msedge.exe	95
PID 3768 wrote to memory of 3876	3768	msedge.exe	95
PID 3768 wrote to memory of 3876	3768	msedge.exe	95
PID 3768 wrote to memory of 896	3768	msedge.exe	99
PID 3768 wrote to memory of 896	3768	msedge.exe	99
PID 3768 wrote to memory of 896	3768	msedge.exe	99
PID 3768 wrote to memory of 4772	3768	msedge.exe	100
PID 3768 wrote to memory of 4808	3768	msedge.exe	101
PID 3768 wrote to memory of 4772	3768	msedge.exe	100
PID 3768 wrote to memory of 4808	3768	msedge.exe	101
PID 3768 wrote to memory of 4940	3768	msedge.exe	103
PID 3768 wrote to memory of 4176	3768	msedge.exe	104
PID 3768 wrote to memory of 4176	3768	msedge.exe	104
PID 3768 wrote to memory of 5116	3768	msedge.exe	105
PID 3768 wrote to memory of 5116	3768	msedge.exe	105
PID 3768 wrote to memory of 5116	3768	msedge.exe	105
PID 3768 wrote to memory of 3184	3768	msedge.exe	106
PID 3768 wrote to memory of 3184	3768	msedge.exe	106
PID 3768 wrote to memory of 3184	3768	msedge.exe	106
PID 3768 wrote to memory of 3396	3768	msedge.exe	107
PID 3768 wrote to memory of 3396	3768	msedge.exe	107
PID 3768 wrote to memory of 3396	3768	msedge.exe	107
PID 3768 wrote to memory of 3600	3768	msedge.exe	108
PID 3768 wrote to memory of 3600	3768	msedge.exe	108
PID 3768 wrote to memory of 3600	3768	msedge.exe	108
PID 3768 wrote to memory of 900	3768	msedge.exe	109
PID 3768 wrote to memory of 900	3768	msedge.exe	109
PID 3768 wrote to memory of 900	3768	msedge.exe	109
PID 3768 wrote to memory of 5048	3768	msedge.exe	114
PID 3768 wrote to memory of 3732	3768	msedge.exe	115
PID 3768 wrote to memory of 1524	3768	msedge.exe	116
PID 3768 wrote to memory of 2444	3768	msedge.exe	118
PID 3768 wrote to memory of 2444	3768	msedge.exe	118
PID 3768 wrote to memory of 2444	3768	msedge.exe	118
PID 3768 wrote to memory of 1960	3768	msedge.exe	119
PID 3768 wrote to memory of 1960	3768	msedge.exe	119
PID 3768 wrote to memory of 1960	3768	msedge.exe	119
PID 3768 wrote to memory of 3352	3768	msedge.exe	120
PID 3768 wrote to memory of 3352	3768	msedge.exe	120
PID 3768 wrote to memory of 3352	3768	msedge.exe	120
PID 3768 wrote to memory of 3276	3768	msedge.exe	121
PID 3768 wrote to memory of 3276	3768	msedge.exe	121
PID 3768 wrote to memory of 3276	3768	msedge.exe	121
PID 3768 wrote to memory of 4036	3768	msedge.exe	122
PID 3768 wrote to memory of 4036	3768	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://world cup fina
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe3183c188,0x7ffe3183c194,0x7ffe3183c1a0
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,10773062177007283185,5046765171193641569,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,17479851747954108490,5099590243361631829,262144 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,14748390049729922351,14334846677380353376,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,10465865958551904695,2916784749291554781,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,13523563156157563372,13675825764097689205,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,11441292460902596792,13617687532392438642,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:2
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,14210204321386905373,10801088365287963113,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3620,i,2909384519563840825,12724477891030673574,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5296,i,15579615461443115131,5158499488572439175,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,12411733491832012262,9033970899513499896,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,16857982319243915614,7627051555772333319,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,4351034209843539885,3706588922322476952,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,4351034209843539885,3706588922322476952,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6420,i,3986142963677266489,13360375956976216974,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6472,i,6480739258551051540,895788307139574402,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6656,i,3858473120489656977,17398866992249822516,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=6680 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6708,i,17106517653643008829,11676079463700196467,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4276,i,4151358262730471228,15068848284697607497,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5400,i,14326475785500045910,1477892510991319681,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,16633511506614531107,5392353671567344839,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6728,i,6358666445121808152,16767049222020636331,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,18225400351075524560,12225526032467644186,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6784,i,6142682072587634858,15910724597103773616,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4036,i,17307829231758994081,3495189925502025635,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6152,i,7781937872145993424,17899067621760901070,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7136,i,15764163702551908644,14521470746496514332,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7268,i,14191935906467526919,3319800191246017860,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7540,i,15323934337890507113,4297689979790396436,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=7508 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7712,i,8001364847808451054,12819278828468299367,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=7700 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7300,i,2614702742812365463,8930273609057607769,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=7852 /prefetch:1
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7912,i,6162518773871695011,7073236774324749808,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=7920 /prefetch:1
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8068,i,12449734559824521526,8265460889537767730,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=7956 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8204,i,18278436550018793680,10220061131589651318,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=8216 /prefetch:1
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8236,i,13965402066576917995,16294998202018376235,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=8364 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8628,i,1476091125339669833,3790460473545603040,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=8620 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8764,i,18026538547407317496,17292218622300320165,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=8788 /prefetch:1
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8984,i,18437127603493671390,15553791823374548307,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=8976 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9104,i,12202402552141588487,14071372662837852403,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=9100 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9380,i,5667146752320283478,4146744137784196427,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=9332 /prefetch:1
  2⤵
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9464,i,5593094968379082851,589885675244647284,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=9436 /prefetch:1
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9612,i,6305021214419264788,300355149966476328,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=9460 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9760,i,14690686949696598020,502949090570667388,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=9788 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9948,i,6296397597101999102,9509212136332484069,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=9932 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9624,i,10250025410069017534,14430506047663706629,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=10128 /prefetch:1
  2⤵
  PID:6652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=10312,i,831842974501735475,15740121962675654406,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=10324 /prefetch:1
  2⤵
  PID:7052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=10360,i,9554417451433470553,8360464429618414132,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=9620 /prefetch:1
  2⤵
  PID:7104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10572,i,5660497631092482760,8576409847866820648,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=10592 /prefetch:1
  2⤵
  PID:6172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=10880,i,10005759401286378455,4927573293227159793,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=10896,i,4220350236992237872,2263239471869169959,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=10700 /prefetch:1
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=11048,i,10280466157675392419,11027890730667109316,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=11176 /prefetch:1
  2⤵
  PID:6996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11068,i,6543408779184501269,192896358450938189,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=11040 /prefetch:8
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=10836,i,7520514727146174888,13974500860358085461,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:1
  2⤵
  PID:6636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11424,i,3825827403982572823,2038803134120244728,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=11372 /prefetch:1
  2⤵
  PID:6440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11804,i,2492863774934648728,14942997098196595793,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=11776 /prefetch:1
  2⤵
  PID:6436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=11620,i,12692311509260245024,4255221379818343420,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=11612 /prefetch:1
  2⤵
  PID:6264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=11860,i,3065998361596887632,9506647423171989061,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=11652 /prefetch:1
  2⤵
  PID:6920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=12088,i,17160353122330732767,1929922448323767267,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12084 /prefetch:1
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=12252,i,8625802444986670370,11301821938327508243,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12132 /prefetch:1
  2⤵
  PID:7100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=11576,i,2263598704294524294,16847881574954033151,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=11624 /prefetch:1
  2⤵
  PID:6328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=12540,i,1294150843705345834,10263046946470920594,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12544 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=12252,i,4328931749265834812,12692952204069924455,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12124 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=12704,i,15198114692817441805,4893859302370954419,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12868 /prefetch:1
  2⤵
  PID:7244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=13032,i,7940804883660157350,5743478060140908784,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13016 /prefetch:1
  2⤵
  PID:7300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=10936,i,10963119182178711281,16787434956094398978,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=10700 /prefetch:1
  2⤵
  PID:7360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=13280,i,17719068824572943129,2100982739895078950,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13256 /prefetch:1
  2⤵
  PID:7420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=13284,i,5680715035013160152,5868952738704429658,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=10616 /prefetch:8
  2⤵
  PID:7440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=11608,i,6370838807179003631,7627645893207754335,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13404 /prefetch:1
  2⤵
  PID:7568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=13248,i,15177441951818207966,10525444241930935386,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13372 /prefetch:1
  2⤵
  PID:7624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=13652,i,4383306103834453782,5320730808429135316,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13532 /prefetch:1
  2⤵
  PID:7692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=13696,i,7828343301929615419,949873899307367749,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13280 /prefetch:1
  2⤵
  PID:7748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=13904,i,3016469454913623835,15889911055323093654,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13908 /prefetch:1
  2⤵
  PID:7756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=14120,i,18137753374594601012,15169330157825832266,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13380 /prefetch:1
  2⤵
  PID:8032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=11576,i,8807954120054500095,6968588860732074789,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13788 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=13148,i,390269183662989349,17753728324099773817,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13620 /prefetch:1
  2⤵
  PID:7232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=13492,i,14903606345526019433,13032207896671696608,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13364 /prefetch:1
  2⤵
  PID:6664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=12776,i,10080591746683498149,9720587545506911045,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12392 /prefetch:1
  2⤵
  PID:6192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=13452,i,12366695885709025079,11310875228099869283,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12136 /prefetch:1
  2⤵
  PID:6916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=12232,i,1887485774576917841,5604572099671158862,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12192 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=10264,i,16649425607684133890,1595808399694889392,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=9924 /prefetch:1
  2⤵
  PID:8176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=9600,i,7832951489555317779,13941171564668387134,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13216 /prefetch:1
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=9852,i,12801520902983117402,684900036808874121,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13192 /prefetch:1
  2⤵
  PID:7940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=9844,i,14215132177772206612,3989473938950976256,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=9644 /prefetch:1
  2⤵
  PID:7944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=13424,i,10921554736249985751,5623431447648093265,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:8280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=10472,i,6781581917253526014,11236838623026514574,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13216 /prefetch:1
  2⤵
  PID:8684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=12988,i,9472645441358175545,9610388913773599345,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=14168 /prefetch:1
  2⤵
  PID:8676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=13196,i,14336033851262644876,8772585164560557464,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=14144 /prefetch:1
  2⤵
  PID:8620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=11872,i,17069829188392708975,6529795970828387599,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=9876 /prefetch:1
  2⤵
  PID:8564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=11712,i,15491113764485021552,2987640927364713262,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=14056 /prefetch:1
  2⤵
  PID:8500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=13564,i,3610767011514924776,13026571755200287252,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=10640 /prefetch:1
  2⤵
  PID:8816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=13084,i,7845810397227630102,1861663565500265702,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12408 /prefetch:1
  2⤵
  PID:8876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=11816,i,7176475547552945853,3769845635093972871,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=10340 /prefetch:1
  2⤵
  PID:8936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=10420,i,14075756058166250452,2578271049828368075,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12260 /prefetch:1
  2⤵
  PID:8944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=14176,i,16743223651337608026,9686874963045722639,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=14164 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=13604,i,17976133576647918289,16963789750004257009,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=12276,i,14179281226931103217,11165184051379507702,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=12748 /prefetch:1
  2⤵
  PID:7164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5484,i,2225311608071059984,521220598747819784,262144 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:7252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,637015676992986007,9676934277671169402,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:7652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,2434543947925962569,6319217722757779059,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
  2⤵
  PID:7680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=5588,i,16458524303043034272,2130605134458751855,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13436 /prefetch:1
  2⤵
  PID:7732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=9760,i,12215825140367406551,6990808334144187383,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=10396 /prefetch:1
  2⤵
  PID:6940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=13144,i,16220932848571997797,12004054597728852877,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:8212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=6952,i,137095921608775915,16691411528989232791,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:1
  2⤵
  PID:7924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=5084,i,2838502264758595208,16274454429265536789,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=11740 /prefetch:1
  2⤵
  PID:8456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=11444,i,12594162415993626720,11012355395684559212,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=4488,i,10126787425025405366,4297111149912147923,2097152 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8148,i,14856687537235204622,16791957903825166190,524288 --field-trial-handle=2292,i,1432861471659088285,10919479574821263675,262144 --variations-seed-version --mojo-platform-channel-handle=13900 /prefetch:8
  2⤵
  PID:5584

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4684

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

31017cd9-3ea2-4945-b578-5417e477b331.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\31017cd9-3ea2-4945-b578-5417e477b331.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 64KB
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487
SSDEEP 1536:Lm4AGqOak9IP5qOYV7SofryJiRB3xVcVXsIBGCrmQR:LITk4qOq2oDwuhpDCaQR
TLSH
T1C55302D5B8E93222BDA947C28B442085CC6F367CF53F3DD8DE31AD2AA5909DC41847C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 68KB
SHA256 7884d6318d860e84acaee04e09a6b8c9f5f8136f6c2508b053a36f3482912540
MD5 8fef53c4232cd28bef72af71b3659f5a
SHA1 49b3baf3ba317fd6fbfd29676d61b225aa14fb1f
SHA512 4806d8c2329cd7619ccff25bbb5dee8db7f916be34a4675bc5560ee0b488ccc1f5c5dfce5681bba8b7cd766cd1035bf145fc053ca73cc53f28f74a714a55af1b
SSDEEP 1536:DbfhKXLgsb+LlcHmlnG6w+7S66EVDeMhN9ks7fguAktbVC4wX:DT4Ewml0+7VtNeMhNys7fhbVCT
TLSH
T1AC6312725BD2C90549E4020CBC6C152FE0EEFB1DE1FA62E822FB8085DD79B01A218D97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 38KB
SHA256 4392ddde86f22a921269feaf788a13509946046047df6926017041ff33d0293e
MD5 04bd0131c5ce154413f71d20017679e6
SHA1 a83459180dca62eb56edee213409f83e12fa6172
SHA512 5818141afbbc45553e72fc106699d9357437f1c2751751dab4f51ad7127e92a6ff85fb67905073addfdec5dd581c8c22ffc8dd6b85919d6a1d72550ebda5376c
SSDEEP 768:hrGgBfBZrOcgLWz/irLn2nTXzHXP0JsdgCQL1/UAv73nWEjvvuUwp5:hrGA51OQ2naXzP0Jsdns73WEaz
TLSH
T1170302AD7D526331E7FB684CC972AA1340C424498063CB1FBEFF098E9D44A4FE056A23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 35KB
SHA256 2d105ce7740cc04457c5b5d9f3019c16c141e9077bd4e43f13904c5e2da5a099
MD5 3cfb9050a5a1a2ae3d297bc97ddbb9fe
SHA1 4bdcd8cce577c773303c0844c8d6730d35e26723
SHA512 ab24a1a6a0ebac9b2b405c5367f314597ad1275cb2b65dcb44625a9334bda9551f0097916972ba09162a38022cbef40463c211945e604f9ca3ce2eedd339f659
SSDEEP 768:RISkGu7N3oqouvk7ZScBQkhXc9dX9JidO0wZSf1PZ+bb:WD7SA4hXQX9Jip8Sf1x+bb
TLSH
T1F1F2F1E5F931615A8973A976A9C5D643B3D629B000A2E77F3316A0F130C46C8E7E4F4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
Size 50KB
SHA256 f22cae1c0c3de5767e5f3a55adabcae9eb2d0b189d6af34451d6ca7e838dafcb
MD5 190ad3c6f68e36a1a7e245b48edd0721
SHA1 29033af84e2b6f36c9cd026a086e366d463a3f06
SHA512 d7be9a95a14efec2a0aa3a5940de68071f467f7758a111ba85a6547c7f8b297778510138e9244686f1a5408b370c2fccc8ef31f2c6f37c3bd2ad5e6f62b660f9
SSDEEP 1536:+/kd0TOxUxlifNp04mL3xwuK4LRKm1Nk26:+/WuiWLxwump
TLSH
T1F633F1F3D4D5D537844ADA349CC0CB75A2B14F0372E63E1B7754E2598AAB1C09EE260B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000af

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
Size 179KB
SHA256 1641aa5ba3433b4d22000846c1f02276c15326fc7af7fa3d6456d27074304262
MD5 6fe0bc9d152971c1c4919baf62c096c6
SHA1 66f9e0366aa553302a2c817c456e01b183fa2430
SHA512 c38ea0d23fa1f6da4ae68f75612c1174817c95bf6fcc4ec5b4fd5b1ff6167c5f53ff7d2e8b042443f4b09820ded8cf0b1f7ad61ac729792cb40c0321c5c6cbad
SSDEEP 3072:Rb5OlEoZXbOgA23U01lFlH0JThsryvC0pXnYjyjSAGoH0Bk8cHefzws32OT4lFst:7OKQrOgPk01XRprr09nYjyuAbH0BrL7d
TLSH
T1AB04238E27464FF722E42B92EB125D56814E477AF7343923C2228D1249DFC7D8A6F478
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
Size 35KB
SHA256 a07ff4c0acc768a4fd5043bdfafc889d7d16663eeaa8a404e38682b9e7128109
MD5 e1c5e3473c0940eff89b240c2ee73cfa
SHA1 fd470db2df77aa68e342b02adbcd0d2e0200be2d
SHA512 96e115d28da7af4aec1cd373b8df5af62d1bed2a8a09db38d7aad6fd987af91bf522bbc86ab4e3d771c4c88001aa32c373ec3ff0c7f4a14c03778373aa1b63e4
SSDEEP 768:yNpf4C/VUMcpZ4Co+j8jpw0yyc/052bIiBiqSfwmzVvpF9oh:QwC/2McoCo+Mcyf5d0LSY8J9oh
TLSH
T14FF2F2DD92E55DB41F890D4C0E2CBE1D752CF63CA17A303860162635C8A791DB73A9E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 50KB
SHA256 0e40e0b5ceca9e2ee2cb1e5f2cc967190997108336e6fc0f5325597cb3da7152
MD5 3a5883169af332c791ecb1c8a6788604
SHA1 36a56bcc0b355cc3d27f7f943c8bc1744f3a4384
SHA512 f34d326e657d1564362eebec7ae4f09daf112eccb3be82acaf7a57d9fd7420b889591a1cc07910fe4ab1cdb3e3ef9e81df675cd643f8a5b5d99f4c8770b1e993
SSDEEP 1536:H2WXWoXOL4w7Q8l4MjaaEwqzRDdV4dUyqaWZezxefKd:WWXWoa4wc8bjsnRDd0UylqetKKd
TLSH
T1F33302CF343F41F966E5511E2388B4CAA7E649D5C2FBE52274410F248EFA5A106F3A1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
Size 196KB
SHA256 1fcd26d58246e871dda0f2485aa6b6110a595a6bbdf575423d79e16d9f0318e5
MD5 b40c2d35c64cca02e207093a4a9a6453
SHA1 9715a17289ee01a1eeffc231649e0e7b0aaaad65
SHA512 ca5b1d70607f36b34daff1849d30a7467c73e0cab7105c3e94bca1d871a04171e364d7b53b4a854f61f618a7ca31958e6cc023e272d9d2116ca45455cc8e6568
SSDEEP 3072:qGhzaJy+Wpw8cZyDhw7o6SBtLop3SjDLh2id4/BkvoCHqJIBzxGmwD:Dza98cZyDhw71eLoRcD8Vc8szx+
TLSH
T10F142286CE5CB05A118B4E3E549DF74F1287171A902A8C4D7618926AFB4AAFC833DF5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
Size 22KB
SHA256 79012c022666a7b249ee6ea3f188d1f10c5b2ffe00df8284d77adf623c62a7b9
MD5 7a819d39a3f176f82a71f6e2430b1578
SHA1 6c413a3ea374a66ee87bdf4a7a72842ecab14dc4
SHA512 5f0f198da7a383e0e7168def39cfd196745886953523f5f6cc7cb96d6da08f4df15ed7b63b679e5878301bf80932b13c3cf14d65c83c9b18f48cb9e371fa747d
SSDEEP 384:MH/D0mb4h6TstD9Iel1UTeMnqnNOhWvo2VsZrChfipQrQpeszxAeJ5C:ELNY7ZGqohKo2QGoveszieJk
TLSH
T1CBB2E1A87327C0167FE3197276187638DC8086D4DE80BF423B185CDAD76978B47867E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
Size 54KB
SHA256 5d0f8969179ad117f27e74a73ac4765c28057a9419eb04e0a1d679d67e6147e8
MD5 909933f9e9fed5549a38114fdf320b9f
SHA1 394e0c8cf1fb4b4b323cbf92f633f4f0b1fea81a
SHA512 71db0bd8889153a04ec7a6b75d0ee3fa8553d9f755e72d769285f97f52b2f5c36a3e28d7cef30be89f416ceebb9b6e021941bbfe41307ecc6a2cd6e5ae10c320
SSDEEP 1536:QOaRFuos0uHUBqUB/yUEuV4enyuLYgdbvpixIi3q1:u7v1u0Bq2yUlRyMBdbvpmh+
TLSH
T1A8430265ECC2D1952856E320714E329207CD26AA186E0F336BA3D747F17237BC9C9D5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d5
Size 60KB
SHA256 fc6d02bceeb34064c4381757c68cd91cc2f79f1d5d5d2350decc2369304e513a
MD5 24ba46bfada799408d6bdae1e3666133
SHA1 ed70af2fe12e6d8afbf563aa8917719f31a3d24b
SHA512 06242dfb2f4d4a6a8de00bb4f254000746f043aeda7c8d1be679c3ab59661b33c81af3b889d96d836e2788cfb75c984ccfdce6f84ddb2c7abd7f3947734d5537
SSDEEP 1536:1X4H5ULHkoghtT1QE50FL138xBOYS7Fd/:1XuyjkoEt43Azin
TLSH
T11253F27CAE11F9C1723638C097416C08A05D1B87EAD79218C7914FE39EF16ED96BB913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
Size 73KB
SHA256 d887dc87a436350d2c8a5d99a9db06e307e2ea8d69424482d2ae4881862599f8
MD5 9e732947d63d3677a4a627b8f113fa05
SHA1 c44078cf99d4dd99d5fb94963a7bc46e2e2a9068
SHA512 3ef67d237d4bcfc77e7e33dfbce7553f212e88f87d019c2fc5eeb6462f961008d0ec9d1ee1810b3e542970820495754bef59d96ee32dfa557d08f51fd797a860
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwp2S8CDar:mj1h9rIHApCReO9vWR+RS82ar
TLSH
T1727301C22CAC9C1B0BB791C703E58C55183A6256CBB5591C8E7C1928FFB552613ADA8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000116

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000116
Size 23KB
SHA256 8b64c6cb75397080b083f565b63a36d225a333c36eb3c2aa44099de47477547d
MD5 7f03a47f3554e5a1639467d43780abbd
SHA1 6742a5f15791ac32e68120fbd3b77791c7a4fa72
SHA512 206c51e8b9079b898ec17a0e3bd8ca4580ef3992ec08e72be4efa393c5d6c7fd4510688b239051db8812651e68457613a9d80491d8fe718bb3efbcbce8e20a20
SSDEEP 384:uw/5QoxphW1lXZ7cNg86e5x1U/KWuB8PlWLZvxwFOltAnkvOB/bxDtuXzp1amOAO:LVW1l67/DBYklvxwFMtGgk9Dth7QcKpW
TLSH
T151B2E1D7A06B876BAF8E59A036DD839D475DDBDCB3839C0A5376A4C1DD02BA8050812F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000117

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000117
Size 31KB
SHA256 ff21cb418590a8ec25869fdcc3f3269793097d8d1aa8981b786791ab9a74a260
MD5 36c7a103da669e7102db2e95fa6e1aaa
SHA1 2c7d65a7d8edf0a7f34a61068c20efae77b6a4fe
SHA512 f1425d51f45b5a0cd2782a9177a81d1a3266f16d452be366fd8dd0ed15b6d2ec607438025f2f8f3783017037160f2bce739af5bbb7ae8ac76d8e5529e0296b4c
SSDEEP 768:6sEiLQyPOQqzUd3SX7jSbBqt8qL3CWrmeuQwVx4lIHez:fEyP9qI1SX4n8La6wVilhz
TLSH
T195E2F1E765CAAFD5D5837072E8D83DA78552695DA7C5B3C80C9FC3AE2F7E2420A04308
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a95206680eb5a2bb_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a95206680eb5a2bb_0
Size 263B
SHA256 68a6edbbc0f0c5d5e8e3162868d9127973efbd3235e184310ad841ea08e374e4
MD5 ad2ea6acbba33911f8310f5e854a8039
SHA1 8635666e75807b1e3f44ec2bec498beba5851d60
SHA512 c274b789fdca17b00143c330fa19b973c0ec88fc465709ed6e2d0cfbb9d1c27de265b849c0ea8ac1ea996c0e0a41928e5021350fd740445e943d69a0f0ddd4b7
TLSH
T119D097F3E8A84C80C26A6DF1C9EE00EA430382ED0E69A9990490A19323040BE2382238
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 16KB
SHA256 809f68301419581ae168e2419fd450a61e9da5ea01b929479fd5413c65a11b82
MD5 a49c8f042c48b73224acba511b7e9942
SHA1 28b87e2e4f607d1b09740d5d36dbb3f4250d21ab
SHA512 0c9866c239d0cff412099d21e35bfbcd1169efbe3392f7d87c2d50e28435ac92926a7b18be429eab6b5bf29858e7251eac943bec4236e49c795ecf77fbfd3606
SSDEEP 192:TD4tPA/pwKjSJcPgIAPbXjKUjTN63yIMJxIwqbiF79u+1Ps7q2cNyWbn/12:QtI/FvubXf83yIMJHbPs7q7b8
TLSH
T1DF72D9384C819872CBEA0DF288D33D8C35B266FBBFA38E830574653616323ED42E5654
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 e60fe706b0a9aebc49b12532550f3a22d86eb00651b8d7da8f3094e427a89281
MD5 27b69eef60b5b3ba5e33c6771a67f005
SHA1 0812f6cb08f37bb9e901830b7804d7f6e979ca67
SHA512 eea4af0d07c354838391241bd0638db235184aca895f247f14b2c2ed88cc91630ae2dcb562eb71782f5f4ed9162ef72c6317dc69890967b85f7c3a075947251f
SSDEEP 192:7JXPA/pwh/SJzqI/RyjKUj+N6oycUJxIwq6dF717TFPsRq23yWbn/QJ:VXI/i2pyftoycUJHPPsRqQb2
TLSH
T19472B7354C819872CBEA4DF288D33D8C35B166FBBFA38E870575653612323ED42E5654
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59c346.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c346.TMP
Size 3KB
SHA256 558ceb8adde96a1004ca4e73d91dd7eb30d86389754e5adf65c14f1a10625b41
MD5 e4cd4e7cf4527b8be59ab2a4fa32e0e3
SHA1 7a3d079eac7cb7e81f2624586235766178881f9d
SHA512 bc06e7577a17155ab3bb5c8214225fd28f8b329d2a14a7f0c712b9d4155b2ac89cd6a1c21362f78b1cd789523ef6086dcbcf795dd8df95fa95e4f13c52abbeee
TLSH
T14D7140348616C4B3D7461D7050C12D0D727A8AEBFAF31ED6239C4239237277457E99B8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_finance.yahoo.com_0.indexeddb.leveldb\000003.log
Size 19KB
SHA256 3b680d6c0cfcbcba5fcdcaa92db3bf203094d4b6e8d1407ea35198178e04bc52
MD5 6968c29a1ada35719b306e4e015f03d3
SHA1 a81348edb06810cbcbfc9af2c5517c9a3f5e9bcc
SHA512 74cc803c3759a41293508f2cac3ac3154650c2135cca518bb2b77477cfe3b64b22c401e345c26bc64a79aee698e989ef4de90056e10ff328492525b82e01c0b0
SSDEEP 384:1yViEs9XMpcDjEBMf55SotPbr7pvjtgb66SqioSemShG3SRp+oSemShGloSemShr:1yViEs9cpcDjEBMnbr7pvjOb6Qh+cplX
TLSH
T1A492AAAFA600DE23C4AD6B7119A55FC84B77BE40BDC6829BF1E4F67DC9B54A04D31202
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_finance.yahoo.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_finance.yahoo.com_0.indexeddb.leveldb\LOG.old
Size 395B
SHA256 bf53fe630e9885328ed7100699970349e9e9a39ed910c8e18399959d3f1cb0fd
MD5 a42a15442290b48aaaef29f079df450c
SHA1 e8e0f3b28764ffa29fecb35f4c7afa9d20f97bdc
SHA512 f23dfe6d547aca0362b3912b421ac38ffccb8311de9fc3070111b62dca2d0279755c61f3fbe1c5e6961ee368ee55094a2d8dc84f28c200c4db418181acd8054f
TLSH
T18FE065AC46CDC12F755560AE42B87B0992A33A4AE6CC7D925B08C96CF1C2041E3BF1B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_finance.yahoo.com_0.indexeddb.leveldb\LOG.old
Size 395B
SHA256 625839a23a25bc7e7950fb558ca12e4cae7f74625a24337e10722d5f3e7d1c8d
MD5 6374f5f632241556c9cb772a961fb349
SHA1 d8e31ab3daa875e2f4dd4298472b6ee7d7e7245c
SHA512 dcdf420095af85883e71d758bc629ea129618d8dda74a26df88ec04d43539150d0417ceb65008a03abc3f2db368ca81087192fa308b7b94b436b3d496b9b83fc
TLSH
T11DE0E5A852CDC12F719520AE417D7B0A96933A4EE6CC7C921B08D868F1C2141E3BE6B1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_finance.yahoo.com_0.indexeddb.leveldb\LOG.old
Size 355B
SHA256 b29a3cbba388e8db0252a25cdca4766921a596e5a001fdfc834b122c0b003c86
MD5 032e6a705c8eddffdde9cf07cfa9927b
SHA1 3dc53d82a97d6d215af5957db2a1e810b31bb4c7
SHA512 779474d84024204ae67e8e436fc3cc2bebfc8c25f3f0b87744729b56e4b0d6b1498a2949cc0fe5a25be086f772f23ee808bbc3d53cdf1e425f7114bda3f5fb94
TLSH
T170E0222882CAC12F229420EA15347B0F8193260EE7C8BD914E44C828F083085D2BE1A0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_finance.yahoo.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 39KB
SHA256 c77df93cc288a1786af27973382a72889ffaa6e0aac51c4efff721f007caeafb
MD5 483f4829545ed1007d36537017c96b82
SHA1 c141eb0f450106c5d673f5184f1edffba17d6c3b
SHA512 a8f6cd1e61dc165210bbbc7a194b566ed15c24ed6340c24794b36cf5124bf15513aa039e68c6844056806f6591078b2a9d2710d7ca092444ec22fb8d2ddfa68b
SSDEEP 384:DBfaCeSebO2tMGfJXZ3eKr3XRBeWpce/eeFCz1cRJr/JHddUzJOeJKCwreIAZHak:e3D6u36tG8C2HVmUewd2K
TLSH
T1C503ADF783F8492D8A2652F0DA68BE1FDF9D1925832C7D798DD57E0643E2421E201B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 de1515164a6ab922cd629069b6ffe3d475bad560bdff5475b57b175e44bfcfec
MD5 b04538677cb27f63cd46cf6d99cc2b6d
SHA1 5e32328d486dc7c1fc30f1c5e7b2578ad1ef7bb1
SHA512 7097eaf76921b9721639f0453ae4fdbbd6c5faa31d56ffe7003946c48ec12d812bac3cc9532b4dfd3149d78e2f89cb53faec28904c74a751fb06857eb29a8031
TLSH
T145D023232555F0B8956C3E854195BC4FDB3520340891DDD510E0755E1531C5C5517245
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 ee0c5e0865ef22af8ca75cb7a9b2395ce2dcb96727e0e46f00bc542e4fa88e99
MD5 c8ef6da966b450aabef560c26e5dd23a
SHA1 1ef02b0df2a1b1221571c6b78a9d03f05f79555e
SHA512 2a127edbdcf14cd2e2ec1aa30d978ca8f62ff86374b7fecedd2e0dcbe9e1e7cff0996615320eeae0fd43693a86153b4f64cae354d680dfb0790f229a1c802b3a
TLSH
T107D022233316B0B8A96C7E95806ABC8FC73620384892EDD911E0B8BA0631CAD190B345
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 8aa1c7bdf6285fc604949a65ee67b9546dc6c6a0620a369dee26a3d331194c7d
MD5 33517ad170b4f8ff69986741c37dddf7
SHA1 91ccbb8f776cf27ee9364e67fc4bbc0ff3eefc2e
SHA512 0ef19b9f6b93459be8a83ccd7744ffecbda970e5d52dabb9275e501f3d183d682f93f3d158c0a885e88fde76548eea9f677a04182dd3fa9d2da668f4d2d1fa6d
TLSH
T1A9D0235315567074556C7E95805ABC4FD73510348C96DDD510E0B46A0531C5C1507249
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 6714ae10e0d0876e086097cf604dc7876fad861ca41d4c557137ffb2f7b3e799
MD5 d0a6097e20e42348eb598aafac82ca92
SHA1 9e672ed15f4ebb2defd86926139cfb0628518623
SHA512 31808a127f33d5af5c50578d3808d2cdc02d023fc2d528f7fb086472c7846131c4a9c0d15d52161f65b0dbfb55c362d24a3b963fed63bddf44193e320de6b43c
TLSH
T1CDD023172155F0F4557D7E854159FC8FD73510380851DDD510E0B4690531C5C5507345
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe58a999.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58a999.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3bd3404dcf567593f13178b1181fd8c7f9967fd3b05974794d986578e14f0fa6
MD5 b63765cb7ca2bc43836644e3458c768e
SHA1 b52886294293e1c16098acdc2cb59040fda0644f
SHA512 a3311d075f49059067fea1dfa3b2c67f649b00ae1c375bb4cce08a472cf63b0e9db700a9276b9bd1f3fef3491fd51de3ac0d606e0bf2b802aecec77b00c15c31
SSDEEP 192:sxZSRHyM/jK1Ml8M0cB1B/fZsARKbdpTh2R4HW6+WNi/w/YI3+HKIgrdlwL:sxZSrsm1B/fZsARKXTHbb/bxlwL
TLSH
T18862E856A6249977CCCAD609FD647F53D6F50862DA900E4CA9FCCA0C04EB6ED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 c126d4c244d5620d167c3b014311b5afd337c912f5ad795eea5cbc31adb5f90c
MD5 bc2ed8757160912464d9d9e9f99ea517
SHA1 03173a9cd09a3624e647455b7bd15029dc18af03
SHA512 5b6debca7b96bf19c2f1ca90f05a559ff9b699fddc2fa8bfb1fea438ca8b2150ac7bbccccb6ce99ce7c152d1290f70efb5d61a3222780b5e22f60444de6a850d
SSDEEP 192:sxZgRHyM/jK1Ml8UQi0cB1B/fZsJR2QdpKWSIRIphI2RdSlHW6+WNzdavPYHoGZR:sxZglqdm1B/fZsJR2AQqHbUoJZcHwL
TLSH
T10C82E957962489779DCBD20AF9657F53D6F60462DA900E8C99FCCA0C00E7BED630781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 67a0bc29135a0d1c2198c209fbd29f1a45360371222bc72cbe040e70a59b016a
MD5 5c2f9c7bddb95f22ad803b338ee2a70a
SHA1 757d3a32a47e1ce69eca273807c33408e8f8c141
SHA512 d8e78ee33350ff4a311b36bbf40e74ab5c075d41f516857e309e36a51338c5d334bdf151ec759698a7e6f65e7bd2dd4aa2105f66612e1f8bc68173f1c639bb05
SSDEEP 192:sxZSRHyM/jK1Ml8M0cB1B/fZsJRKbdpTh2R4HW6+WNi/w/YI3KHKIg5hdlwL:sxZSlsm1B/fZsJRKXTHbb/LplwL
TLSH
T14162F956A6249977CCCAD609FD647F53D6F50472D6900E4CA9FCCA0C04EB6ED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 acd531b98e9b47676f74b88c3dec2b61f10dc595c5d8e145ce65bb055f22bebd
MD5 41038530a66e5c4d13e4a3915812ee97
SHA1 6588e8e0b5fab0af2af95580cf265759d39b3ece
SHA512 341d5ef09786b665d19d06bc42567e1d1bc0a1cd5cec7ca19c68a101d085da6dac06b13a7c7160705bc98485b71023791f7686096bc6c55ab1d8717370126258
SSDEEP 192:sxZgRHyM/jK1Ml8M0cB1B/fZsJR2xdpoWSI2k2Rd4HW6+WNsn4H3EXYIMKHKIg5T:sxZglsm1B/fZsJR2F+UHbV0X2UwL
TLSH
T1C872E857A62089779DCBD609F9657F13D6F60862DA940E8C99FCCA0C00EB7ED630781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 7534071f71a038a3b7d16dab4fd5e87ba3dfc04dc48faf940c0e97008445dcd4
MD5 6dda7c9df70be4c28ef51f16d50814ec
SHA1 595ba2e167a02d69f7832b8b5bc84915a1fdb503
SHA512 902cd4fb112cb74f45e878a493d6d264ac9fab121d9c3e796d593185bfeacf4c7fe28c7a0bb3d280ab14981fefeba7465baaae7ec46ea5df7a21f3f2b571a030
SSDEEP 192:sxZ3RHyM/jK1Ml8M0cB1B/fZsJR2adpPPk2RdEHW6+WNi3EXYI8KHKIg5bYSCwL:sxZ3lsm1B/fZsJR2qAHbVXKywL
TLSH
T1B162E856A6248977DCCAD609F9657F53D6F60472DA510E8CA9FCCA0C00EB7ED230782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 077fb04590726382719cba3bf5f4a32969ff4c81f4833b58c4436811219ac8c0
MD5 b9fc3fc57ddac1a472e981ec37aab5bb
SHA1 9b7a67cbf59869b0b646fb7368b2718387c2b94d
SHA512 bf03ae00e578373c89ff8d1c365ce7656fdfa239a40d90fd79e6924e93a21e840b7bdecdf704eb3256ed51f4d7303ebd756b332538bf7de57a587cf8c8a5e980
SSDEEP 768:xVsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9+ro2JP:xVsqxXlWvJD6Tu1ja54LAs9V2p
TLSH
T11ED21B3B694CC77D4F840EADEC266FD76ED801CB96988D5447FA880C02CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0a988db9f1e3b3b97f62180fca464380ab3fde1c\index.txt
Size 249B
SHA256 f016674748b337e71ae827fdfbebe8732a143f1bd973a6d11aba887dbfcabe95
MD5 1d82480181e5c2ef461ebf14426d2cff
SHA1 74f879e8fad820e2a817869d4e90c0df8cd171af
SHA512 94bbd6719f845d981b7793412d37070528cb380f45b77db1fddbefcf3b8f66d815881e66f01e7f735d29eaa50b698b733cf10b1ff763d112b93b86903c0a3050
TLSH
T139D05E7B2A71D116BB71559810D6A70DC43B2E48FD849FD840A2508E85D2DB3DA5AF32
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe593dea.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0a988db9f1e3b3b97f62180fca464380ab3fde1c\index.txt~RFe593dea.TMP
Size 256B
SHA256 beed8ac48be39a1b71ad6443ce228aa7b8934cb8b31e76222dc70d0ea1e0778c
MD5 15bf0015d6cf912e4901d9369c54881f
SHA1 766d39f8b7ec8a09b629b1247baff96e412a1ffa
SHA512 fcec9acd902819c8d627e5331164650d222c646d87c92383e2bfd8e3f4cea18c9f8bc9f958400ef92e08c0ce4b146a2f3ed7abbf61678cf01f90c5ec7ce6d639
TLSH
T135D02B3B2671C101773100880095A30DC4372E08BD449ED840A1304D50F2C73D65EF32
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 2KB
SHA256 d07b045e09ed9ae61c71cbab89b5c8c0a8b98cc6d5f74e0036e1400d4d19116d
MD5 dd932d8680ee978b9b7ec80df10a89d3
SHA1 e814b1687997784959d7ef6660e26c6d4fe5df2a
SHA512 9358b18511a73c76f79c26974efd706f3b27e95ad079a1ce7a1dc3ba9c7134fb86a6e4ed249325672ddb9827aa983e15feb8641c1efcb2814a484becfb1262e4
TLSH
T13741948C4DA18B2FE858817304B2A8A433B0A8CC6B5597176C3C22367D1335E365B3EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cf823.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5cf823.TMP
Size 2KB
SHA256 cc8e20d9d8c60767e8bd2be097abcd641340a68c3ce41081e736a30bbc3394bd
MD5 eb5d84e079c759425118402698a7c159
SHA1 f2e45810ad1f244930e309424f7b321138d1cf96
SHA512 e1f91a2a602fca0436150edd293af65c355cbf6670958b9d19088fe2befc1599264d34f59e61526dc10844f8073e786570491d7228832c1c1a6b0d29173fd9fd
TLSH
T16241DA894EC1C62FE88040730ED3A4B87335990087267F4778BC5636A8A27ED3E4F1D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 6225b596b3c55a15c0f76df83c467497f09beec0465fc5cb3b7c9f62fae95fc0
MD5 7179d5977043dff0639e5a9c8ad89a48
SHA1 e978297125250034950b419a95ce7bc61499a7cf
SHA512 74842eeb5d9f33df96467be2725189b9fc9629ecf57267e977820b7446044ee25717289ffc84a76f964559265bee5015d6540d9099acf4193aeaf6832dd182da
TLSH
T14BE06FBA2AE70C00A8FBC3EB08B344A60410F828C891EC8F1029928310622A02826C26
MD5 SHA1 SHA512 TLSH

Submit Download

ba23d8ecda68de77_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
Size 77KB
SHA256 897dc59fb62186a2fd0d1559df0df48fdb94e04ab9977489a9d1e4675252dc02
MD5 ea30cab07d9b3b4154fa43cc7112425a
SHA1 320ec3539d78600ff42f128ea093acfa8e789d97
SHA512 dd72cf5948296594b6ece937538723e822ae5d1929abc10f0866117ec2ea4004747b20985a024f5c1454365240509ace3d55915f9a7a13c7593cbb0a5c06684c
SSDEEP 1536:ahJpE79D3L8a4LgWyjFoUJaEwdVF0KNq0VjU6kJ7YLveoXHX8jH0M+w1IGNxpLMa:ak9n8a4LgW6oUJaEwdVE0VA6ktGveoXo
TLSH
T13373098A72A7E43257E340E454320112F33A66A4384D94E8F7FC8ED56E56A81D377FB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba23d8ecda68de77_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1
Size 209KB
SHA256 c19e13f31c9a96702a77a1e941b7c116e98a20321c5e56577b61cc8573aa6a03
MD5 9724495a300270fdf0723e598c43bf21
SHA1 a68118d95e1159a788c3505d4446238d85a66f8a
SHA512 b067efe6928c28f3ab311eb1d4ead9b25838e7a68fcd1a0eb03ab976b17eaffff16d217d777d95e6d77b2caf209efacacad195cdecbfa38b4a44e40277106080
SSDEEP 6144:6lkOjO57jY/B44jMZjIuhFjQ4jovibM7ir/NjmhYhuPYWGxrVUwqfvL4Vc:Xo0k7ChW
TLSH
T1812419526361612BCF2787FB41B34617B77981483F83D32A16D1A7292C313F79D9E81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 eea644458185d7c08b069b469e494fde7087a548a2896efd6ddf2963dc2c6345
MD5 48a7bb3de32823eb8301d56204503269
SHA1 b067101be1be9582b9b5b6500205ba3d5a1a8608
SHA512 d667d8ccb5172f5f0ac1fe13306103f81e7ee4bfb0d91f163249fa680aa70e27ac6f96da81d71651ec869490d55d465457b2046e51a5e18b4679d8bb4531538b
TLSH
T192A0021EC1740449C44143B0946102D8B71549145A25262380F418A8AB60670C1162B5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe593d7c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe593d7c.TMP
Size 48B
SHA256 b4381ca2c6f5095feecf12f91622670ccada934cb6c8cafeca7f7c28990f4ad4
MD5 c1239cea71f027ef1458e4d1dd277792
SHA1 4497382105b1fa850d46d038f8d7162d24adbaca
SHA512 ac4e7bfd998de5ce54eca803e49599809ea7ca0cba07b62afc4840a86f28a3d22cc9caa4f8b3489014d164ccb07a6888f4199cfb2be986025284fe6f861bed9d
MD5 SHA1 SHA512

Submit Download

43501a4647b052a8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\43501a4647b052a8_0
Size 63KB
SHA256 c8c233e641de47bba589a8d85c74c0219eb760a7f98ae8671f566ee14fb4abcd
MD5 e4eba027ae0d344ab5334c6a7e5bdb40
SHA1 a7df7f09fc4300ba03e37c38696fc1ce75d5e591
SHA512 4386f3bbb1aee9cf3fdfd3360efa928153ccd9223758f2483a2aac29e2d4124e29ef170905add6f76853e46095a1b26231b7c016fa00dcaa1b52aee5dd50417e
SSDEEP 768:Ic+e1DiIGEUmiHx2Yp3eEFfgoAWWhrJTt9/XoZ+UyUC74Vm3BoW+zmYe2GH8Bwf0:DApPx2YTqtRXyy54w3iz1e25B+zw
TLSH
T1EC535BA6337174B7427BA1B180AF130B313BE157F40485F8A194EEE54A44BAA1277FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 73a86686be49445c3f1df5fae2b294f8f70dcc60fa5fe69b8385d71521e40796
MD5 61db19742b9dfe36f4ecaaf47a21208f
SHA1 540784a4c46cbf091d5a17a6b1d0f6f4c07803d6
SHA512 50f3eb1151011ea2dfa400a4f0d48c64a1fa2308370c91bae7cf32e0ff70102460cbadd652c7faa69cf3af5bc16b0a8575082270fdbc22206ed00f5a5b559d73
TLSH
T179B00231C310092BE8002BF271D7326637309C3127179B4347B971F8AF9174A8D42569
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 60b886042933290d3629e17181ea35b90cb0f2648129a4fcb8ba75cf4c973e32
MD5 788f68e8088fa3e32acfa6c76ade2eca
SHA1 fdccc884ec30b08c24e27a5d2495b5be562a0adc
SHA512 c80073e100779048dc110d91aa4a97c32ac169f5d0eb47de44249e0585626321106bd0909cd39b321bf1c64969f9e5bbbf7e40e9dbf1b79324e2b2355b47fa68
SSDEEP 96:KYbaKYIKS0QKJ2ihan2K0Isk8I5PWCkK+BWMkyqKZ0L/WKE0K6GMK7SB:Ex7jVjd/O
TLSH
T164E11216713F024338BD3918E36685768E4272A73818A5BF7BB840A55B6BE121CFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a42356f-71e7-445b-aebc-bf6099481bca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2a42356f-71e7-445b-aebc-bf6099481bca.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 8145ce551a2e446c8dd42f21e067a175910fd7f00d2c690f2c8a698ed60ff0eb
MD5 3975b3797fa5a31f6ea47f440a7cb48f
SHA1 238f2f45efc1ea06c418e6443fce9dc30c181cfb
SHA512 a9b68e24caf9c6258dd089bb65ef84d27014e981716dcfa43457c83948b4f5178f928126aa7cc6722f15a6835f7f4a9e536f901001f91fea1c9cffad251c00b1
SSDEEP 384:GtNn/s3n9SfsNnU2beapVRNMOKx9oeScjmwP:Gj+9UMPHMOKx9oe1jD
TLSH
T1B8927D326D345D279EE6518AF94B36178FB851B7D6C42F84D4EC6F0C01DBAAC0317A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 f84f4caf579f273770e3bff2183698ca2762061c4d9920334ba5b8d5cadd5bc9
MD5 91440f296c880ccf9125e88202caf1f9
SHA1 01cb50716e9d4e094297ba51b05ac5bbb09c0d58
SHA512 dadbf7ea1bf6bbd3f709207063e3e9ec391cc1a70625d670e6da5502bddad9ad607be6d27e5ba67024a07fbc330fce4933513dab20cbd25a7b05d0a600261a68
SSDEEP 384:v+iF1tNn/s3n9SfozsN58TUNTUlIlJ2be4dVRNMOKx9zeScjmwP:vVF1j+9+UswgKDHMOKx9ze1jD
TLSH
T14FC23AF358E78936D9AD4747AB3E2E138EBCC063B5845A40B7985A0CCDC65BFC306915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a2995ee0611fbc04cabd85ec51686582a0bfa6b206314c8999423413d211fc15
MD5 fad82ec64464662ac13752029e75e090
SHA1 71db1b526f1ce7a70fb28e1de90dbd9d54be0542
SHA512 7eb0b99c428b75a0afce861a28f47ac401b245bdb793f6988d6f986e89c54a27e8301e49259e57ad87d39900d4fb2cf1baececbb8815ce0f413de43f6759426a
SSDEEP 192:tONI6JkRtQmiUydLW+RNMOmEoIh3sRCU6:tONI6UrmW+RNMOKYVU6
TLSH
T1A802E9356D785CBB9EE26E0AF98B27175FA4107BE9852F80E6E81B0C01D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d24c552ed95674612eedf596051fef0b2739fd851a631f5f905a6821eb5e37db
MD5 ccd35219ae5d317320b4875ad6800da0
SHA1 fc0cb95b8fffda5e653eda852d902fc241496778
SHA512 f3fcc3f14adf8fb72131f8b2f64b2c9bd16469d3e70452e984fcc7d7c8ad0752e9616286789d87f04033406772382273c67004273b780e83467d7d439a3f3379
SSDEEP 192:AONC6JkRsQmiUyjLL+RNMOmEo9X9j4VcXqrNU6:AONC6U8eL+RNMOKx97eU6
TLSH
T1E0120A366C385C7B6EE26545F88732135EA95137EA897F80D5DC2F0C01EFA9C135B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 4d91262ff090b28e1239ef22e124743b7501c59715d3408ebcc181cfce588ac9
MD5 ff7745dd90ae07b16244362909239ff3
SHA1 f9a45d6d1e7a77857761b762942060437284716b
SHA512 1407bfb5ae2ff20adbe1c23eb0ec8216046ed30b44f8fe26b8c1be7fcbbf35fe0cdd65550fa23dca7f571e0b7b3a58ec0815617133cb425b4bc9d49a87623de1
SSDEEP 384:QtNn/s3n9SfsNnJ2be0NVRNMOKx9oeScjmwP:Qj+9UxzHMOKx9oe1jD
TLSH
T19E928D326D345D279EE6518AF94B36178FB851B7D6C42F84D4EC6F0C01DBAAC0317A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 878cca16acd710f5a852fb6dd66d1349dfeaff125311d5bb07ee64579bb08b95
MD5 2c7f742e2d6d624a866169ceeb329b79
SHA1 c3ad8965183fcb1cc24b8e19f83c32f7cb098d1f
SHA512 bef48d91ba2302950236a3e78fe4a1fc90c5466054d36ffb8b445d31f4dbd59957b0f8ac9d25a4ea460c0bda675493fcdbf1799aaecf95082ee36506d1d45d51
TLSH
T1E7E00903A31010FAC029277041E31B616BB6C9B413E3135B5A20427C2CA27512E65A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c37b67ce928de359009eee9960005e156ccfb2fce94cbd56ff89f34ec56280af
MD5 1ec6f44c1e1c06a26b289452c5015681
SHA1 c5655b82ce748be032898a440eaaa4de37fde15e
SHA512 d55034ed444f09b057394a9a867fd703bced8b1c958bcb88a75e328bd540ba8beebcbd8205c1e64af213ae8297bf6d1f3506d13c04fff64963fa846d9f422f3a
TLSH
T103E00203631000EBC025137100C31FB03AF3867403F3024D4E20427C1C223123F11BC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2c83d08cbaf6eedb3bb09425ed10ce3239896d8c8a8c39765cabaa5615e365fb
MD5 a51f1ae0a2df007e66491e13631b8113
SHA1 7b37129d87e0c4dd85ae9518cd430739ecea4cc0
SHA512 701e3e4e2caf0092847fa4459fdbb9866ce1a0ffd9d5bfbc34cf66745e1284b1af65e116e15cc37cc6b6696c05e24212bdbd8c61deeb3222d33eb04f3aab9fc3
TLSH
T11BE00103E31000EBC029237100D31FA02BF2C66403E2134B4A20427C2C223123F21A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 78d06145fbbdf38dd7ed3283cc0a9a19463c87d1baf0d5ff83560adebd5009b2
MD5 453701f2a4ee550864bf02ad2fa4e973
SHA1 650e57c5d3127aced6434652fe188332047f8648
SHA512 ed133830c64718f6ac706b059dbaf85fa3982d93f4a45d795ec9881102b4d79328b3bf04fab6467695e77a871e6551801d777b8ab2aa3f7f7a0b3179841d9adc
TLSH
T1B6E00903A31410FAC029277041E31B602AB2C5B403E2135B4A20467C2C627512E25E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 239d7d52ab6151dfb98dd3f6a28e868c82fe22f26fb1019d1d2f386c9deb9edd
MD5 a34f7d86b62e3fbcac88a4fa018faeb5
SHA1 0918da47f7438ce3afa3034a3db021e4783bd539
SHA512 5e4d7e107177d38aeea1e19ecbde43306e6244c16dd96074859e963213633284779fa8e970e0d11cfb3efb5ed1beee6c12cb5b766a7488dc60045515d6323e40
TLSH
T1F8E00903A31810FBC039277081E31F617BB6C9B413D3135B5A20427C2CA07513F75980
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe592689.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe592689.TMP
Size 392B
SHA256 df4270b4464c72265095cbffaf32954fd87897e151fbd73af238cbbf112f6b6d
MD5 5c9a14fbc6179b4c66b6a642508dd192
SHA1 f942fe3e11f04810b67366ad2fee54c84e264fee
SHA512 39278a59ca45663706791d0cd0bc73ad22322e460a356337da74a894e219d275c61a5e7b23955bf93736e34429d4c07e09a321a2d6690aa29dae68e3f2121ba6
TLSH
T147E00203620000A7C014137000C31B6026F1856403F30245451042781C123102911B80
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c77206b57bbef7439ca1c655bec1ff092d7fa37bd06c88d122d951a0f25ca364
MD5 a00d9d51f40140589cf581dc5848c810
SHA1 1e3ddf01e60e64da8ec8ef133e7f68ef9fee16db
SHA512 ebd0bba74723599092d40390575db848346ae28c3a21bee747ab18be0f2b979433aab5bf2cf0efbcaf0d870cb99abf987f6a9103e6aa49c51e5e2956f1610767
TLSH
T178414C59ABEA1118B3B76E569BF664AE487BB9722F0BD05D10010E4E0622A40CCB1B37
MD5 SHA1 SHA512 TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 fc9d018c4bf6b6130bd1d0576d45f996957a7ec33cbebc356b8db1a1a4c601ac
MD5 cb68283aeb788c90f3eb507f633ccb2b
SHA1 2f0152a921ed385647cab36019e899a008e433ae
SHA512 69bef9cb001c1b88c8bd67ec110339577a4e4aa11c7f8da0f35b2658f4398c4b975aafe334da10c2ec450dd07a85e0b5e21429bc34e125e3cf200c7504f4dba4
SSDEEP 96:PR5iJWKUwwadNxciJy4vfI9DkXC67wX6mNdciJ40SbmZwJV8ymsNQT1t+UIGiJry:55ieikfJ8ivSCyVenTOWi5oiBIT
TLSH
T1F132D1549BE52606F2F7AEB2A5B63601AF3AB9166E14DE0D0141820D0C32F01DD7AF73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads