hxxp://mlware[.]com

Analysis

user interaction
yes
max time kernel
900s
max time network
885s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/07/2026, 16:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://mlware.com
Sample260722-trvr4aydqa

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
593	540	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
540	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134292106886199540"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{BF7BA288-CEFD-4130-BC76-5B213AEBCE7E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6092	msedge.exe
6092	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2800 wrote to memory of 2344	2800	msedge.exe	86
PID 2800 wrote to memory of 540	2800	msedge.exe	87
PID 2800 wrote to memory of 5040	2800	msedge.exe	88
PID 2800 wrote to memory of 5040	2800	msedge.exe	88
PID 2800 wrote to memory of 5040	2800	msedge.exe	88
PID 2800 wrote to memory of 468	2800	msedge.exe	89
PID 2800 wrote to memory of 468	2800	msedge.exe	89
PID 2800 wrote to memory of 3948	2800	msedge.exe	90
PID 2800 wrote to memory of 1936	2800	msedge.exe	91
PID 2800 wrote to memory of 3948	2800	msedge.exe	90
PID 2800 wrote to memory of 3948	2800	msedge.exe	90
PID 2800 wrote to memory of 1936	2800	msedge.exe	91
PID 2800 wrote to memory of 1936	2800	msedge.exe	91
PID 2800 wrote to memory of 2132	2800	msedge.exe	92
PID 2800 wrote to memory of 2132	2800	msedge.exe	92
PID 2800 wrote to memory of 2132	2800	msedge.exe	92
PID 2800 wrote to memory of 4552	2800	msedge.exe	93
PID 2800 wrote to memory of 4552	2800	msedge.exe	93
PID 2800 wrote to memory of 4552	2800	msedge.exe	93
PID 2800 wrote to memory of 808	2800	msedge.exe	99
PID 2800 wrote to memory of 2424	2800	msedge.exe	98
PID 2800 wrote to memory of 808	2800	msedge.exe	99
PID 2800 wrote to memory of 2424	2800	msedge.exe	98
PID 2800 wrote to memory of 3476	2800	msedge.exe	101
PID 2800 wrote to memory of 3476	2800	msedge.exe	101
PID 2800 wrote to memory of 3476	2800	msedge.exe	101
PID 2800 wrote to memory of 1348	2800	msedge.exe	102
PID 2800 wrote to memory of 2924	2800	msedge.exe	103
PID 2800 wrote to memory of 2924	2800	msedge.exe	103
PID 2800 wrote to memory of 4512	2800	msedge.exe	104
PID 2800 wrote to memory of 4512	2800	msedge.exe	104
PID 2800 wrote to memory of 4512	2800	msedge.exe	104
PID 2800 wrote to memory of 4920	2800	msedge.exe	105
PID 2800 wrote to memory of 4920	2800	msedge.exe	105
PID 2800 wrote to memory of 4920	2800	msedge.exe	105
PID 2800 wrote to memory of 8	2800	msedge.exe	106
PID 2800 wrote to memory of 8	2800	msedge.exe	106
PID 2800 wrote to memory of 8	2800	msedge.exe	106
PID 2800 wrote to memory of 3720	2800	msedge.exe	107
PID 2800 wrote to memory of 3720	2800	msedge.exe	107
PID 2800 wrote to memory of 3720	2800	msedge.exe	107
PID 2800 wrote to memory of 3468	2800	msedge.exe	108
PID 2800 wrote to memory of 3468	2800	msedge.exe	108
PID 2800 wrote to memory of 3468	2800	msedge.exe	108
PID 2800 wrote to memory of 2776	2800	msedge.exe	109
PID 2800 wrote to memory of 2776	2800	msedge.exe	109
PID 2800 wrote to memory of 2776	2800	msedge.exe	109
PID 2800 wrote to memory of 1936	2800	msedge.exe	110
PID 2800 wrote to memory of 1936	2800	msedge.exe	110
PID 2800 wrote to memory of 1936	2800	msedge.exe	110
PID 2800 wrote to memory of 1260	2800	msedge.exe	111
PID 2800 wrote to memory of 1260	2800	msedge.exe	111
PID 2800 wrote to memory of 1260	2800	msedge.exe	111
PID 2800 wrote to memory of 4608	2800	msedge.exe	114
PID 2800 wrote to memory of 4608	2800	msedge.exe	114
PID 2800 wrote to memory of 4608	2800	msedge.exe	114
PID 2800 wrote to memory of 2560	2800	msedge.exe	115
PID 2800 wrote to memory of 2560	2800	msedge.exe	115
PID 2800 wrote to memory of 2560	2800	msedge.exe	115
PID 2800 wrote to memory of 3372	2800	msedge.exe	116
PID 2800 wrote to memory of 3372	2800	msedge.exe	116
PID 2800 wrote to memory of 3372	2800	msedge.exe	116
PID 2800 wrote to memory of 3568	2800	msedge.exe	117
PID 2800 wrote to memory of 3568	2800	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://mlware.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff8f47ec188,0x7ff8f47ec194,0x7ff8f47ec1a0
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,2936542097769147339,12897882696166283751,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,12651591372709381383,7411572474100335303,262144 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,9806419846167422160,14689920471980825752,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,15255174994132388976,4559558539265047995,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,16128962275835982544,15288891802217846361,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,5589405829161628166,7890336939601762516,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,7143932598887461193,16564323859298522385,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,6746339369067861733,14002382887172123667,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,5697155503880215512,6473001955234136636,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,13109324656250698472,9974192176417244147,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5972,i,4157445175819933434,11425440150909076185,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,13109324656250698472,9974192176417244147,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3720,i,15199354972889913789,2315973884855189244,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:8
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6448,i,11933287590799716088,9843539097226569842,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:1
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6660,i,1299484550688917713,3658614879758575260,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6732,i,10817595428244297434,6367328299584047816,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:1
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6896,i,16988727421058780219,714012442655741175,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7144,i,5302752130151378028,14924840517494288414,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7164,i,10331102332011701319,12692994482403319349,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7048 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6916,i,6146083377760263516,12509123532614112922,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7360,i,11606483834300122774,12928289117793135627,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7364 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7492,i,16558573450931251063,5061228642457391567,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7524 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7300,i,858544800160262090,16054425977228077378,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7680 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7876,i,8731789239213911241,6494293032915998658,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7804,i,8215719838777456168,14753161795970857386,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8024 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8144,i,2894627915629335637,13831418683832202354,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8148 /prefetch:1
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8284,i,14796543123783728059,8787277710489842944,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8288 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8424,i,7877560665574056456,5004417359319625457,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8420 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8556,i,138285511945963818,9221590552326672086,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8468 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8576,i,12747137771533799408,1132569949000234074,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8716 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=9024,i,7935056920549931512,9123273720713336806,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9004 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=9160,i,11338110887263905924,8535481162971970923,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8988 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=9272,i,14449997089400953955,10646276902223835059,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9284 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=9440,i,5680544622617927540,16434512846336121514,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9436 /prefetch:1
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=9308,i,5624925013072097761,11975233351892927828,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9504 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9612,i,943398874884442036,6523065652402593324,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9608 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=10000,i,14576145717631373146,4751888713091416597,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10040 /prefetch:1
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=10164,i,9325430367808699647,12887841368173288974,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10168 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=10204,i,7014687052826592282,17942262410159854115,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10304 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=7864,i,12634714868414218800,11036410939419532557,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9580 /prefetch:1
  2⤵
  PID:6900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=10552,i,219458249081090522,1950117305797155416,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9404 /prefetch:1
  2⤵
  PID:6908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8988,i,15836279123631155211,11598415233333935275,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10676 /prefetch:1
  2⤵
  PID:6916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=10684,i,13979557919191319918,8244695496378680322,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9416 /prefetch:1
  2⤵
  PID:6924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9884,i,7351161305980599940,10601913252275121074,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10732 /prefetch:1
  2⤵
  PID:6932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9292,i,12764821775188819963,2796898143198801284,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10876 /prefetch:1
  2⤵
  PID:6940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9300,i,17291428822794458561,16274200789425433128,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10172 /prefetch:1
  2⤵
  PID:6948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8928,i,12309545268921367450,8017555335065647124,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=11108 /prefetch:1
  2⤵
  PID:6956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=10248,i,12685528604239540574,14822045475323658751,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=11236 /prefetch:1
  2⤵
  PID:6964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=11260,i,14072471150043761523,6733578739758056196,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9456 /prefetch:1
  2⤵
  PID:6972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11236,i,6095884731163365973,11889317914174641522,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10312 /prefetch:8
  2⤵
  PID:6260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10776,i,113973700054967926,16118986024601558364,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10716 /prefetch:8
  2⤵
  PID:6268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10276,i,13236856793449673148,18020448023411939795,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10224 /prefetch:8
  2⤵
  PID:6280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=10288,i,4397438256878753782,5577567059286244313,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7432 /prefetch:1
  2⤵
  PID:6444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9040,i,7037654417974260189,4690216489942565704,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10280 /prefetch:8
  2⤵
  PID:6692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=7392,i,9764499570133936199,1640992040881854538,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10840 /prefetch:1
  2⤵
  PID:6696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10832,i,7702911290502082361,11047245254999863113,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10220 /prefetch:8
  2⤵
  PID:6832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8752,i,4983498167527508868,3369252502830973521,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7348 /prefetch:1
  2⤵
  PID:7080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10920,i,13571596900840936813,12424267453097883007,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8976 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=7320,i,2279340756202410710,1230578932160666959,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10304 /prefetch:1
  2⤵
  PID:6256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=8532,i,9375553807342784583,11872516140660373692,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7724 /prefetch:1
  2⤵
  PID:6460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=8744,i,7525714388464008155,14124302353795676456,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7328 /prefetch:1
  2⤵
  PID:6468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=8560,i,1888886753540840500,12543050558931715072,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:1
  2⤵
  PID:6476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=7196,i,15342709998395011758,10055861825826208182,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7516 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=7928,i,18255951727980004298,14106264659621952391,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10352 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=7348,i,16900613386654828434,9859460625200289673,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7956 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=8444,i,1415820795333717167,2983468503593180788,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7988 /prefetch:1
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=10452,i,1799462946424999725,6120216691458279243,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7544 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=7936,i,4522262433174659658,13743362685155806947,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7148 /prefetch:1
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=9880,i,10130669178099815685,18080325740524750727,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8664 /prefetch:1
  2⤵
  PID:5936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7388,i,17867184084432672043,4931638250895623235,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7848 /prefetch:8
  2⤵
  PID:6228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=8444,i,14616969250888811634,4768612968061474460,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9316 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=9344,i,13589412239807676996,8147321713163121056,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7752 /prefetch:1
  2⤵
  PID:6664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=10776,i,9295295621006892112,7075660097826989851,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9212 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=120,i,2997196956299005090,7670617184746906868,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8496 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=8056,i,8707134717740222340,9749086882594599329,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8644 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=8468,i,4593704780409525748,15088804294363646006,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10080 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=10096,i,9946004857812269256,345904212322939428,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7660 /prefetch:1
  2⤵
  PID:5516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=8776,i,8160778478668470501,3190831695696711568,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7556 /prefetch:1
  2⤵
  PID:5352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=10124,i,1708959023767740798,3485700604943631673,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9868 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=756,i,8999053548342548880,9224018101086560972,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=7576 /prefetch:1
  2⤵
  PID:6776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=8824,i,16738720210132964439,3931715923715793186,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9760 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=11084,i,9089754429269928981,10004088865047203677,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8988 /prefetch:1
  2⤵
  PID:6372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=9276,i,15379158601973509832,15413198112128851962,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=1924 /prefetch:1
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=10120,i,15295622641584014764,715733042940400808,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=11096 /prefetch:1
  2⤵
  PID:6908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=10012,i,9799900804248582987,17715795304163987911,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=6984,i,14295841048814474235,17570025645412523999,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9516 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=8400,i,10834520189984612470,9717493443105594047,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8372 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=7844,i,13149531119507732726,7636148245064818153,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9992 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=8260,i,16382922914080520807,4679219473506804372,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9852 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=8264,i,2460046491000610100,5415996674525766650,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=11056 /prefetch:1
  2⤵
  PID:6812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=10620,i,17902488212134696587,9961488174198747856,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=10592 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=11344,i,8770545728506051077,4214395544310800267,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=11352 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=11404,i,4735567414922183360,13920399781695386358,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=11512 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=11556,i,11606888411901688009,2450241204835789799,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=11644 /prefetch:1
  2⤵
  PID:6840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=11772,i,10661395205671622134,2437355573643729910,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=11788 /prefetch:1
  2⤵
  PID:6900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=11832,i,11197297757788635245,7201252208745888572,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=11932 /prefetch:1
  2⤵
  PID:7076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=12068,i,8916756205456653155,9946555139585469310,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=12072 /prefetch:1
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=12136,i,16797854014577060192,2614744439786512651,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=12216 /prefetch:1
  2⤵
  PID:6148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=12352,i,5744958134238151061,18081006188113138748,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=12368 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=12428,i,3291723213335933740,5184762172326285344,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=12516 /prefetch:1
  2⤵
  PID:6184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=12656,i,14969911815882515333,14324536712480379468,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=12660 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=12704,i,17153010837458314390,7229002439274211956,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=12696 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=12832,i,16864102823693356736,3642554578399390113,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=12840 /prefetch:1
  2⤵
  PID:6996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7888,i,14122906252585233648,18426673275595232590,262144 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1672,i,14072340609705814208,6909791053335082907,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=2876 /prefetch:8
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,2038427504652483211,3427915479830983119,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=11364 /prefetch:8
  2⤵
  PID:7084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,8863302923348424939,16059319184849570867,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:8
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=5272,i,18278913772317943120,13136633965239767763,2097152 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11160,i,1594355908575743960,8452201477911887988,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=8424 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3332,i,4954729809308425870,9711962828290076376,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=9076 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1036,i,13159186890044854110,114764860884206032,524288 --field-trial-handle=2228,i,14792164552799096009,6303908195984549615,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:5948

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

6d138822-53ea-45f2-8cdb-f0384980cbb1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6d138822-53ea-45f2-8cdb-f0384980cbb1.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 e2988f4709294c9130a6912fe9d0dac3146fb79f8c3113436219bf4fd5f28484
MD5 ad2a67210f5a0642712f38843f8b0924
SHA1 c77a6cbf58d525605998121b1a6927ebf85c9275
SHA512 a9e2243897644f23ff1f8cb191e6904d691a10f62f795eb5b793664ff8937df8e087c66f3c7b23cf2e6694291e0724261d9bd8b65a5f0427e45dd27fc7228bbc
SSDEEP 192:GjyAl2A77744111qqqqHHHEEEBBBLLLL++MvLO:GjyAl2A77744111qqqqHHHEEEBBBLLLx
TLSH
T133E15E8782D9CB9EDB0A608B4DA8675C5071370EEBDDE508035C9DE9304F8EEB5B6790
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 c5c0d1883c448e7d6fd2efcc84961ce1e5e7394fad594e3ee1b6744e59900852
MD5 55e38c378669afe50e8b5c7bed4bc0db
SHA1 5c258aae5100dec6069a52e3e617d0eb380d085a
SHA512 237ea2dd761fc6eafe16782187ea5e601aa96adfdadb89e09399a90eaf6b1371e53e06165bcc2ff1229b5f173bf159926801ff98d4b5534601e4b34504198b05
SSDEEP 192:wjHSSvmFPReeddbbbxxxggPPPGGwBBByrr8MDLO:wjHSSvmFZeeddbbbxxxggPPPGGwBBByY
TLSH
T1E1E1448286D4C39ECF1960DB4DA4625C80713749EBDCF9180BDD8EED304F89AF6B2690
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 131e6dcc8f4f740acda6e10e751e48d67b0caf00d15505ac513e67aa6f5f0741
MD5 a58799ccbb70386bad4acd38e82f3ee4
SHA1 f3c484fc5abc5d71023bbcd8bbb63bb1b5c7f2d1
SHA512 caa133ed89aa803b0fc3f859c4e1584ce82ba7b130ccb67fa36489652ca44dfee29eb88086834901b8fa980d281d236889318e5e827fc87669c36b97ddf36457
SSDEEP 192:3jJyjujFjfUfUfUflflflflfufufufufufufYfYfYfYfHfHfHfHfGfGfGfGf9f96:3jG05MMMNNNNWWWWWWQQQQffffeeeeVw
TLSH
T182E1668687D9C39ADB0960DF49B8765C4071370AEBDCE918079C9DED304E4AAA5B2B90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 401KB
SHA256 d76951b00a3d34f48cc9f86f7d64888752672607381fddf22f82bb0a01ca2af3
MD5 541f199b19951b3e59482a248215ea20
SHA1 c88152d22ed1c02e8a95e03035175e07b16531e8
SHA512 e5d501eda81f0727e8a902bdf8941a09a6742f0e6aaae7e88ea279ac939a636ea7ec8213c033b725060316b9ae5d3c07b6d76b50333ff7328cc244a39a785c88
SSDEEP 12288:sMZAir66KKXpCQEGRa9PJxdDFTl9ubuMyezwOAl40I6p2:s6Air66KKXQQEGUZJRl9uhP76Q
TLSH
T14894234AEED55DB010FEB52B6203E7B959AEC7417A1392E08BC316526A3F08187F17F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 67KB
SHA256 c8aad1f5a3ef560e8de3bd2692d380149d63bc1027c9b5610c279e770a3a7ed9
MD5 d4d2ef5a27e863ebc5c4000928241f1b
SHA1 e1b8be3793d0b808239b765210606aeace7aa6d0
SHA512 30a6a07b3581dc0cfe0531e066346d88f3b12df22c2062d07b982437c15a97433cd55c3d6fb6d934730572715f053f74f39975d00e5083ee7a95e959658cfefd
SSDEEP 1536:qqidHDLVqjww0Zb4U00IBild0bBi64VhYmegS7IaRIb6zaxa:qn1LUv0Oh0n0buVvegIIH62xa
TLSH
T1CD6302735F8BC88876958F20F36FB43479507DA9625894F5E2CB332BE29550BB40E1E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 29KB
SHA256 41a55bbbc7b0ef537b528065634a7374e2280aaacad20c72280a82d5271afe22
MD5 ff4a955284209e784bb2267ec933f67e
SHA1 ed2642e27fedcf9460e9b1f8a10e3273f4aacd27
SHA512 e152b250e91ec28db652c10fe92b61a27d49ce5ee9914c7cfaf584d6242b754f9981831682db0f4bf2e94b09e2d7b7feb0a124993744be67090131f4a7a6c4be
SSDEEP 768:HdwTrAVGZ9o2T7M9auNMKisX16VVUThsHyii/m+4OP7:9wnAVGjPTKa2MsF6VWThMyii/r7
TLSH
T1BBD2E17F21F64F291E615E63F0900C5DE13CD6D7C43AD51842A2AA632E916D3F2C0DB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 64KB
SHA256 18f683347abc1364559a75ce21ff91d643b6c03b5855bae850f3cbf8457c6721
MD5 fa8886952be748a4aae41c17ee13e5e3
SHA1 9eb944d39a261ae26321d8e067be81378dfb9e50
SHA512 8e4fadf7e7543945307c58117501efff44560a5872f749f52f4838c5b1b3fb8c5720d5d291eb41ed676ea9144aa89775bf184abc18df2e153d6e98b568a71fa9
SSDEEP 1536:0ZdfIiGH4wGtxyG+aYswtStEmfPzBjdSpssOwTux98e7kEJ8Y4W2o:MdfJGpGtxWtSeATStTZe75J1F2o
TLSH
T1B15312A84B1298934F3E13D68D96C1589E2CF958807E9E01BCC87DC93E55AB1327B1FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 22KB
SHA256 79012c022666a7b249ee6ea3f188d1f10c5b2ffe00df8284d77adf623c62a7b9
MD5 7a819d39a3f176f82a71f6e2430b1578
SHA1 6c413a3ea374a66ee87bdf4a7a72842ecab14dc4
SHA512 5f0f198da7a383e0e7168def39cfd196745886953523f5f6cc7cb96d6da08f4df15ed7b63b679e5878301bf80932b13c3cf14d65c83c9b18f48cb9e371fa747d
SSDEEP 384:MH/D0mb4h6TstD9Iel1UTeMnqnNOhWvo2VsZrChfipQrQpeszxAeJ5C:ELNY7ZGqohKo2QGoveszieJk
TLSH
T1CBB2E1A87327C0167FE3197276187638DC8086D4DE80BF423B185CDAD76978B47867E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 20KB
SHA256 4a46277adb3d6fea227a345a5a369f8b58722ce3727aa8483b30157b8b9c4d2b
MD5 aff945b3a2c3258126173d37e4c8ce34
SHA1 cabc7ae0de9d6af624d631fc4d900bbd84566e25
SHA512 81336d13737aae858ca330c606b8c6da8dae4b971bad13439bdee516045d87ce5f0c3e2cfda00324bdc50c0fcd4a7311ad6ef4f03ee7418fc179a2c7f8652cdb
SSDEEP 384:hNjzXmQb8MpkwMWi5Oih5HybxJJpkPj37eHKuFvrVQ4i6BENyMeYP8r4FQ8bfcTo:Pj7b8TVgiLSNy73ixMsENy74C+QedXXB
TLSH
T1DFA2D00A8DE3F3BC19192B336479A166538D150D70C9F00ECDBB32D2661AA1D9A7F9C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 21KB
SHA256 827c2a2effb07cc4b1c55258223ce5af3e42f35643f91893b49ef2d8e16bbddb
MD5 a862dcce22578fc885f0d8350012e9ad
SHA1 c4c70bf38b6b83ec579d61b5e36d739928b7d80c
SHA512 8639a7c6ba1a99f394a2d7f9f7f5144affac8047a34d8653a1d2e257415177828ed49b36b33d062edb7cb9e6ef89bfcbcbe717a69c3120744c2db719ba451df4
SSDEEP 384:ncS/kaADMv3H5OuPEjUAFH0cythGyUCS3OEigedJYCBObMrvoFGt4lVDotOqInx4:ncAn4O3HE8AFkddci5dJtMbuowt4l1o3
TLSH
T16AA2D07D3903F1609FF9906846FB9A2F437C7D1E07A0D9925C6B98234D3F2890D629E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 73KB
SHA256 d887dc87a436350d2c8a5d99a9db06e307e2ea8d69424482d2ae4881862599f8
MD5 9e732947d63d3677a4a627b8f113fa05
SHA1 c44078cf99d4dd99d5fb94963a7bc46e2e2a9068
SHA512 3ef67d237d4bcfc77e7e33dfbce7553f212e88f87d019c2fc5eeb6462f961008d0ec9d1ee1810b3e542970820495754bef59d96ee32dfa557d08f51fd797a860
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwp2S8CDar:mj1h9rIHApCReO9vWR+RS82ar
TLSH
T1727301C22CAC9C1B0BB791C703E58C55183A6256CBB5591C8E7C1928FFB552613ADA8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 170KB
SHA256 beeff5d634000470f4fca99e98b1df73ab4ae69f60b71d77e4bd533c41e8571f
MD5 9627bf1b3d188bd01a0c9364902915ca
SHA1 db0537b4a61203fb2b160ad57ba7b3bc7d4445b5
SHA512 9dbe4e99cf6c7487d90ced1116bbeadcbc1ac14daf2676ee21605b88c23c6d73e29ed0ce57ea06b6bc36d1f5e6a31e14a69ed12b042378ddffe238bd4ea1740d
SSDEEP 3072:Mz47tVCetjWn43Eij+iz2ViHbhCLM2r0RO55oyHEeVgEimtYYD/eA0gy5k4O78Io:j7trt3x+iSVsbidg47oI12mRD/70PSVY
TLSH
T15C0412FEA10247A50B6214D2C18CF97CC635215DD4B33E470E32C28ED2BDBE5196AADB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bf

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
Size 62KB
SHA256 cdffa77e0dbbb6024af7547441a911a0f23ac87993086f94c101e10fbfc3c5a1
MD5 9d9d28f7c6ff5d1213d081160258e9a5
SHA1 fc2b587e1013fa6a639b3c6bccce8087e2583528
SHA512 2e6adbc1db621bb1130caf1cc715527d4be7cf24694c4fb8e0e47bde45769182a2a4a50e4f5d75bf91939ed6a38aa1486feee7987393b02a7d9746e8f64e3e77
SSDEEP 1536:zgzapnula+BxxDt71+B8LKBCzJfmCuBJOWbuVZLCRX0:6Kuljf5kncJUBkqu7P
TLSH
T1605302A30E62C48C45F81EF61EFE1247F8A27B61718468C2CB76D5B95058E7A6421FCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 31KB
SHA256 6be084b152672669f876b3df40ed7fd2c84ceefbee2d5b464ace888c727de6fc
MD5 f3bbbb0f2906b7f44f07c503297f25b4
SHA1 2e2873496c3f6351b47331f7d67a81600b59757e
SHA512 30791a6ea5ce67b6819fb60044cd71660aad8fab9c7f083dc49647a1558f8a01360429bf7262ef2836525e80fd8c9089a0d17ddd9d5c803617109e629a8ff724
SSDEEP 768:OdM3D8WQLwjjLSvidhWFoWWFqSdOh34ACJmyYkQ7XNjJAAS+:OdmYWQLonYidhdWsqhhzCMdjZ
TLSH
T15BE2F172C3B457887841D296A84F066ED4343A89A359A6CF47C03B385F0DE4F6A5A7F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fe

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fe
Size 23KB
SHA256 acc5cdbb364e89c55f1cb642d85303f9a52c26b19e3db9d76c1b9a40df13cd66
MD5 5727a3ceace4aa6ab144c5388e11bbba
SHA1 395f702c47703495f6bbb37918cb720174c82b65
SHA512 6dd1657e114a627a6450fe9876de1e3f857bcf4f8ea4221da1b1de6ffe88a7234592002a941461bd38f143d46f6a7e6371691b6daa64f9cf870d4e89c5f7c73e
SSDEEP 384:ZqNa6GaTkGxmJF4aBqv+pPdPIkXg/oVuwRUy0q1SbxTiPFgv68T/sYM5foBzbErk:b6GyxuZBqv6djXTA9i20YMKBMrXU
TLSH
T186B2F252935567E38C1648173C284629CE2FB52A8F5B33F1E2ACDEC8D0C9A340D6D2DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000101

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000101
Size 35KB
SHA256 232649ee718e3a8873b24262df1371c3a8487989c38b2d1fdd1025676a7eb03d
MD5 60a3724f03a248c9295eb8b2d12e10a3
SHA1 a117bb42a89a6a4fead09f09c39518404ec6c2d7
SHA512 e66b86694da403fcaacaec59af89594b64a10d535ead81aae665ecd132a581d246b55e97d87845a8210fb75915168a4929fb56051ad2b6681e398d2c0be15ee1
SSDEEP 768:hIKZ0tTxzTtdnk0YEpTwUcOUzdHSk7FBHij5AYPIUMLP6cT+mxQ+tJKAkvqNeL/T:r0hVxdn8EZGvYECtAmpcTNu+tJKA7eLb
TLSH
T107F2E18CD2626AB40579A7404EC8F268505E1948985C51E68D2D03B91DFEFFE2BF6713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000108

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000108
Size 120KB
SHA256 b0e81d06fc34d1417b2f150488273f7f2a978d54e6bf6a8456338524855283c9
MD5 2d075834d7c6ec6bef206d43388e94df
SHA1 5ec88fee6047eb1786ea612aa6a5d702bb9b1fe8
SHA512 1401801a21b1d317c20746e0abc0adfcad274ff09db47f92a17078dd2117dc10a2b7df14254730e6ee421e3ac6f24f0192fa732a2e034fdc33456bf25a952887
SSDEEP 1536:Ur+u/JSvCPZeNRJa9J2ET9APLojk/On6o2LsQtFiaccL15JmzLPPA0jqCkN0cM5p:puFR/fTaKKlviq98LPPAFKc2nTpTpQ/4
TLSH
T1DCC312613E3D07A7E2CD94E0246753BC0E2017BFB68E3449F92993A102E6168C655FFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010d
Size 139KB
SHA256 d4c1d1d5e536b852a8ab314e9fc0afe877647e52749eba1e5fb1072107095ef5
MD5 0832b33b7f746eb984475d98193cf5c9
SHA1 7fa0ed2d38a4bacde01fa1092904f89a724b4ef2
SHA512 1c8f1fd2652b4d8f1b2185bfe0977c1672bee3e329ecd63f005d4f42cb3caa438aa6b597358181789faab580be16c2015d490a2b91b5c1bcd0bddec28699d9e6
SSDEEP 3072:ewdYEkg2K75L99p9o3XY9AUiw5cyKam9lQCh58u7v+BXJBY:emkg2Kz9p9ooViw5dKa26Q8u72DG
TLSH
T141D312788F6A951EB1BF4019580257D00816979CD1F1C6E2BE36BCBE3A0A48D82E72A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010f
Size 41KB
SHA256 39384ad23a1a011e95dffde01a98d4bbb1c9d604da65ae0da356964495f4c1b0
MD5 649501a51d9dcbcc57b71fe219a914c1
SHA1 4b15155418f2c9a4bad1d6f64997bce9b69049cf
SHA512 a4e4fb8344fd1ba46e4bca8240cc08754db4bdd3cc21b339715f01304168a7b976d38c505262a87cf299f434bace859a556eaca2bfcd140ea5c06e47ae4a57e7
SSDEEP 768:8FDce/1enVB5BiewZJZA29X2zeVdl55itug62JpvzvFjTcPig46bGi5ST:oce9enVIZJZAw3tOU9AFjTn6bT5g
TLSH
T1E913F150C7015349C99CA5ED04F0EB6EA308039AAB0A50AFECDB53761E8E570FDA95DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000110

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000110
Size 94KB
SHA256 dcc017b002b62ae9e4b5fa84038841b9b6b74a4f5f0066dbcba6c0c9b6915da3
MD5 2a94099ad3d3615c6e7fc3ad477b9a6d
SHA1 59469e587e1ad73a24015d0b8b51a764638c0c75
SHA512 8cc4aee09d030d91c6ca3a5ef89e3ba88834dc5eb2a8d2cbde7965ece80af785f0023f1490495e92a21dc5eeb51cb570b146d26613fc993d7032eb4833db70a1
SSDEEP 1536:kBfcQXUNqsh3IPZkLcnLFH+xdm2oEdbnDMXtq6hVE5+gwZ07zUWZKqiQKv7H4h5U:kBjkTaPOux+TJJbnktbm+8ACRiQ3R6
TLSH
T1099312405CBF2EB92B9584ACDEF046D2DC09A8C54044C4F35FD22EA8B1F67A9A6111FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000111

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000111
Size 74KB
SHA256 e7cd885fdcec8224f5046e2fbca32f92773e7dd01f42b12d2154fb42dbd76702
MD5 779f83ea28a5e44c74d680ca61fc5e44
SHA1 95f06be6a2931fa6ae2d78411dbc4326e65230c2
SHA512 593e8c37d5b61572c7d3da1aede9f943135a562157c81d343ae0f82cee9cb8c7476f5556f609a0236c1ffdbc8dc76968ddaf3d325645764200beb1e659436133
SSDEEP 1536:9bzuF6XtdVW/3CPkq2YW+6ljpwFsjKKyuqWaSqJJEwMRp8GOLoqe:daAVC3EVsXjpbuKydh5J9ip8g
TLSH
T11E7302B085BD72BDA379D58EEB28D652B17EB42A0C4C0960CCB43887DD38D69753095E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000112

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000112
Size 37KB
SHA256 81fa04ba2e7b33dc62d44067f317b01b80a88b23250063f2ff3087428e4c5065
MD5 b62db1b327f6bd535494d16ddf3baced
SHA1 8db0945c59d2f5bacf678378f9b94ed1a544c357
SHA512 03c3c2a843a0fbdb52b314171d444dcc8fb39b79e2f55726d93d6770838e338f5119b821e62f03a85326622d7aa4bbb879de8073a87ea68748d1602546c73ad9
SSDEEP 768:cPOh2qsk+xiKf6Dfpl6icGJKuPnwXw0bFwyCnHtWeoT:x8qskdKHikuPQOyCnQT
TLSH
T19B0302CFF2034CA299D7D4E12751500684EE36B63A653BE5A02C7FD7F6A624300C8DAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000113

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000113
Size 45KB
SHA256 cc3f2353b3db8184849c43535eee2263be6e06563783ac4af27f362ef658c0ff
MD5 41511335a9230ca3654f0036349b2440
SHA1 74229b13c68a3ee66c818625abaeec0934b20b5c
SHA512 cd0384401bad0b94c9446421228ca0edd75c6c6c17c370abd7afae750dfdc69c4cbc4aa883d7fe69c62b6dea06f2687ed183c38b8140659119793efc68b8eb8f
SSDEEP 768:4VGWBk0ff99QVM6gl76kyyz6GDkRh4VUEgnJk+Ws0GFLnLet9r+Ec33b7R5S4YKt:4VGWBkry56ky3GA4VUAg0G1+E33HLv/t
TLSH
T1F123E1E9ED01239F75464825471D9A3A2BFCDB702120E407D258B92CF08BA7732AF797
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000114

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000114
Size 124KB
SHA256 9e97552483adaf076da14af1b005421b716aa20903f8d378e1af2ea5c1c2f2b4
MD5 ed453c4173ae7810ffdc9c388196a169
SHA1 f339aebba251974d3b0125836ce366e15c38b25f
SHA512 59cb838dd85e532216f258d34913338663545ef3685bc0f7436243b9c7d2b8d09fc1f5a9d6ad18d994bd405da10c3de3c3acfe80bb267533ca434c29f9ed4c8c
SSDEEP 3072:5EDkbxPcCmLUIowBORFfCnMl60QFKKRjAbda2Ur/cs3xwzP7N:5EDk+NZBORFfCnMpQYQAbda22/uP7N
TLSH
T1E1C312ACF342F352E87E6435C5A3608A280656C4FFED17D5046AE21E8BC916B54BF327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000116

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000116
Size 159KB
SHA256 2c2ae068981f4107c54d23d1791f8078c154ff70d9ed1b04993ad9306c016810
MD5 2f47d2eb7b94ae8ab0372b2eea35c9b1
SHA1 b79d844b166112b2cf94c91f8734911ee5750672
SHA512 cfa97d5002bea9967f387a09d8ef8be4d071032418fd591485d13f4a72210b710c99ba7346e06deff13e0a583423d1d3a08704984db8d0099884629236137eef
SSDEEP 3072:i9JBn97nZwJf3iV9waDwHj+A+YZS2qliPLqqeGrOxRS1AQsh6iVnWbP/nIU:6bDZuqKakHNZlX5rOizoOIU
TLSH
T13FF3120917E4225BCD755ABC82A733762BBF07698FE6471BDD821A520CCF5E0AF11CA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000119

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000119
Size 273KB
SHA256 37d45177c82c1ec13dbcbe9fe2a1e6d4d51f0e9a74d1d44819c75af124de3c6d
MD5 973fa6355a854d01866e7f8a3a50a364
SHA1 144e2c2d73de27f662cfd62d7f9dae2ba13bfbb5
SHA512 61c24b1f90d4905b50238f219312f7425b3ff75b3331c2bef22ba87540dffd156da6d160cc8061b6988a454cee672ca81f56173e36ca00469e978ffacefc012e
SSDEEP 6144:iP/6kG2FSXpyqsRr0fQ9gRC1MzWsbUjR15lF8OGNy:iPCwMyqQB9gOF/H8HQ
TLSH
T1CD54235EB923E5E5258D3C5383178B109DB4A0AACFFA9019B81E538753F2C8CCACD761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000125

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000125
Size 47KB
SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
MD5 dcf31ebe107435bd68e0164d59e19b87
SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
TLSH
T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00012d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012d
Size 895KB
SHA256 8a719111a828db3c51d0fe53a1feb1dd13b1c8b03befda242d35fe4db634818f
MD5 a752775832f8d704924a4362ffb4b34b
SHA1 afd0705fc49a1efc47e51683533c6b97e1a6f0a6
SHA512 f791ae1ebedc327236327b7f2bd9e399ea068c4055f9af2154d6ef482a937288d8813fde3748541960f5a18a4838f037904cf4017472351ebe33293cd954c2f6
SSDEEP 12288:xCdVBJOuY1JvGd+mOANjKb0LOww+KL8mQkNJG5s0E13H/:IVB/mJtqQ0a1jbwKrH/
TLSH
T1FD15236E9BD14566C071E338CDABE6AB93FAB55A9F0297D3D88010414DE23C80F6196F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000148

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000148
Size 288KB
SHA256 9e7e7d465a1b5832b12985dcffc1e8c95085a99b3e3053aa1fd8cb398e80ab45
MD5 2b91dee83ddb30c24f46748aea361adf
SHA1 2e9634dce9171de44e4cf0fa484dab5478d6622b
SHA512 17a8e854045b8a975d148539371b38cec70437a2f7a218cbe056be01cc34697874dfb0bdb431e24110689ae839026882af286631a6305e30c47b60ecee4ca9d2
SSDEEP 6144:C80WMcMm20vPwbpmgneageu0NVgYiGdr1MRAAJdEF/2igu5fsOp3WQ:jMcMIXwtwetDcGZ16JyF/4UftN
TLSH
T1105412CCBFD16D8BD4F48B74A586635233B62A80BF6647DBE844E7B61F11AC84F10498
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00014b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014b
Size 1024KB
SHA256 73f3b99b69934673e6e57d4d830836c1c988c04626093b9f14827ef3df6aff7e
MD5 05d1f9702d5cb67cd56679dbb07d2844
SHA1 bb87d8a8da66b0e38df543d649015af11cb39835
SHA512 01b10bee65cf905645f68f220c50fb52dcd8f747bcc3182cee1c06292372784c3de92aa530c92d3004bb15b1aabbf6939fef2cfba3bc0f57b009617265e0ac41
SSDEEP 24576:rJMhTRW7lj4+DuTRfI4+P0dFXzUrVt0bbwWXGHeTi:VMhTR+l8HRfI3rrU3XGHT
TLSH
T1F825234E22D95CABD97586F9E097C7B4A377331366920F87B44A40B14ED63E08FA6DC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000158

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000158
Size 860KB
SHA256 83671a5fa9022bd9118359f98b62c9d68aa7c50f3d809b8fdb2aa6dd5cdd0209
MD5 c8abca5f6f0f37b31eb59d4412fcb408
SHA1 45d405de260599495f86282ca1a41d4fb8d36524
SHA512 156cb6b0507e0f8d4efeadd2f951764a36e5be3b4169badcd3c1abcc9d8a6a72e17d1b5c4bedba790c43f2146d8cf2f34cd5632221914411929168d5cecd6317
SSDEEP 24576:9T7+66E8QuHepBTvnQLgradhx/Y130Zlt1C8PjOc:JKEkGnQMrgh0M5TPjOc
TLSH
T1D11533215FC39906CC7403FBEBD4DA4133722BA8A76947C341EC85A82D75AC69F53E98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000159

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000159
Size 1024KB
SHA256 1a4081f530b80dabec157065d10132ba5285e5999a42f2e843a14cc9f1bf0440
MD5 d1bf5d765608c24aa6cd5b9790aa87fc
SHA1 111622da609245e3e72b4576c5d494d4572d670a
SHA512 8291a96f6c37d57d04bd47536871383e8fab05610acbc17808d148d2676860d2d6904693ead5b0334a4e1cf7c9cf86e46ed99f6b9825b83d9eae1dc50bb4f983
SSDEEP 24576:LTCrTbK10V4N7gZDGeLXiwJ4eU6dL8cOqJBd2LIq0Vw:LTCk44N8Xiw2FqL8w2Uq4w
TLSH
T1B925332855D95A43C171973EA0CF6192E3AB3630ABE3A3939D904AEF5C415E34FD4C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000161

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000161
Size 1024KB
SHA256 533697c80f2659fbc68ef8dd94c33cc8b50128b87b38dd6861349c0afe40a09b
MD5 29080de1e3bf934fb9696a241261f652
SHA1 cb006d5176983d00f94daca2b098038d9f3179ad
SHA512 a12ae641b9626688fa53ce17267c85105bb2e5c7d9c5f43a60d1d27753b563e11378ee756e0a405af8fe1216678b045d6e2417999f3bb96ecc69a492d1951b6c
SSDEEP 24576:4hX7Fud3aRlh1i3buiwPl9KiZiAEeyRSVcVMG6+txUHf21WDMDIeR:+7FuVazriLuiwNsiYRB0kMEtxSdDMDt
TLSH
T1EB25230537ECA4EBDAA883B5CCBD04D1E77613628753A7C39CC58E25AED13C20E62657
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000167

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000167
Size 1024KB
SHA256 198ea5ee75f1d8dcd0b0d2645c556075992b7e5ca7db30ca4a5272a33f9d19c1
MD5 3a8bd2b1683c555d414988147331cc13
SHA1 b6236a1c94640133538eb0130dc310e83106f86b
SHA512 91c0d64aede3f4c7b59ddf945f862be90b0f6496b0c246b7c2d090937992e268b5db7c691ec5797b917286aed17cff4966380621c540db9e957c094b0dd7b0ed
SSDEEP 24576:c8NPodiIAN3g8fh04MZpiQFjsWJOLmJCJ6vwUds9YJji:7ODh8mZgQyGOLdJ6IUJJe
TLSH
T1A22523658792B766D879EFB6C0CBE2FD733A7408421A9353D014D9358EAA3C96F349C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00016e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00016e
Size 1024KB
SHA256 dbc7ce1f0c1d70b58ef409de1cc68ad8e8f87112a1307ff9eb76a573f0354fc3
MD5 0751224f8bc2a0db4019c18d75fee20f
SHA1 df9fba3cf40430c1d384457cf91de2b68c37ace5
SHA512 eaabb83d010240ea022334934e3410f77fca8ab81b7f74545f11f8eb3b48d006a7719a771c631d392c22525d1d65373f555d466d0f11a99194f4fe42e7b0ef3f
SSDEEP 24576:jJAad5dg0bh/aCjoi6Vs5kxXBypy8uj3/eXL+GIcw2+pEIPX2lejbde:eav2Q9oi66vpJXL+Gq2SEe2lejbde
TLSH
T11D2523483BF9D026DCB44A7967A6C73A7BB7B2996F238BD30B2415916CD13C21D560C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 14KB
SHA256 d6f4e33f004f4c30095b694c3e1ed2032613efcd521e36b7c4c9a2d47bedfdc6
MD5 defe09aaf086a015ade5307713152400
SHA1 b1fa94d47a48edd91bf6e6ece735aab1b1dfbc2c
SHA512 4221297624dab7144d474a7df96011258eb50dca57033febe88d8ab9e938d3e0a8cda08bdc6ffc993a1dcd85a2058244d859fa7a6f4d40e9288a8bcd7886e87b
SSDEEP 192:69cn3Su6nq29l5J2u2cEfGFGZG8sPEXAh7MfOFlLQmhzXH1WorUTEQ:wU3SHq29zQPkGlscwhOObQmhzXzUj
TLSH
T180622C3066C0B0AADB36813569D36AF271375CFCF11B9F2294649DB33867BD24B16389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 15KB
SHA256 90f15f49cf5917481c2741e20fbf25e8592fe1eda8a3f14f91fd7ccc9958847b
MD5 453c107bbd68d6445157842f853b6bd9
SHA1 6e54a549a037ba818bd78e879b908660a8f169ca
SHA512 e26962c164b9241da121c291acfa379a313acb68cdbb1c81ac38208c93e191f669dc16e0cb5eff65a98bac6130f66b9f3f9cf5ac39546b18c02bda2c7bf1309d
SSDEEP 192:99cP3Su62q2klpe8u2cs5eFAZGfsVDXkR7ZLZGIlLo8cz0w1Woru//6Y:Dg3SWq2k3FBsAGsx0RHGEo8cz0wqp
TLSH
T148622E3065D0B466DF36813569E36BB231375CF8F01B9F2295649DB33866BC38B0A389
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
Size 21KB
SHA256 763712203ab94fff83391beeb7eda8a74b1f5ebe00f56e0108b40724248bc876
MD5 634ea7aa3aba07053576fe0f477d39d1
SHA1 f4fe2deb6f4644f79dc53c99012d4141144e4acd
SHA512 7fb7819f4440e27b0ba290c9dd353f0a02a8f7f0bbedf3c144b8ae0942458a5fa31e0b43d72986132dc940ef0c5e7e36d31efe7850e606bf8044116ea142a262
SSDEEP 384:fBuCPlMFoM+y0yyJvNvl3kVY5vDuD+54MvBBcB1kMeMAMKOISZWItIfIvI5IvIQT:JuCPmFoM+y0yyJvNv9kVY5vDuD+54MvA
TLSH
T18CA28655B5F9150DF27B9FBAB8B25BA14CBABE952D00DC1D58A0314E4C71F408E33B2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
Size 343B
SHA256 916c0e92d0420062a65a5d247c03fea377618d745b7d8d3ad30500ba8de26f74
MD5 f85aa303fe107b09942a5fa372142854
SHA1 4e4ff64fcf1b5ba29844d1f9dc5000b18f185d3f
SHA512 2aa9223aa5a6fb45da1d4658974916cbdf88b9a4511fea64eb99e3d234d563ae963d0b4eae5258b95dfbc78f9a15b1f4fe152dd2b2d894e92be9bb4ea3f1ef55
TLSH
T1A9E0D8BDC6C9C11B615850EB0626BF0DD5B3664AD6C8BD454F5DC824B447044F57E291
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.bing.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 81KB
SHA256 108e2313c74fffdcb6b039b676b173bf6d94700c60cfe8448732f8b76dd0d43b
MD5 cdfeea2ef67bc88c7f71e46789d4a9ae
SHA1 405e448f3b7a66ab5c177f1e0c28463827108381
SHA512 918f0560881e4f97400ff39522c812c9d1b625fd4d1caba2c505df3ae5b38ed6c32d20357030d8ad04316bb94335cda88bed5bb2d730d646712eb24e91017f9c
SSDEEP 768:u/2r8U8b2ReifVhj0vyF3ujKNjhbmQ4ey4V+uoEtaLDSmOcK+tLm4GSLW4I:1BbDhoQ+mr
TLSH
T14D838EF783F4863DD91261F55A14BE1FCE6D0925432C3C26CAE9AE0AD3F2871E14265E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 46KB
SHA256 ae4555bbc449a27651ce1e399473e3258e88817638935f08f9e709d72e89908a
MD5 d4a24584d4ca4a568ed607466d914739
SHA1 d0d24c70ab0c0a92dc25a3872eb5d9f43b85b41c
SHA512 c8cec70deeea84af1b48aa78de8217c7f91ad34d278402fefc46db4f3eb52b5f0510b2d9b32e55f62970c59a7963edeb410f08aee671f71d044ae7ef963c0eec
SSDEEP 768:QT478U8bnKc2DfsW26+nPancSo+ujKNjh0:68H0
TLSH
T1CB23DDF383F4472DD81262F55B192E1FCE6D0965432C3C26CAE9AF0A93F5871E28165E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 67KB
SHA256 52e3545498380da7d6031ee89e3b2b3f8eab868756ad5d59600b44a3c5d831b8
MD5 042f2c37c7a5a2bed882646036890354
SHA1 58547a2d7227b2a0083828d59a14d071010066b2
SHA512 481ef26b1e1a3580b7578666bb96c84855ebc34ecda10764c508d143dfb06c15fc3c6dcdaca3140228968643c2347b090a3564479dab1d509a8e08b26294d985
SSDEEP 768:Y/TKsbEP5uivPehenkrDujxVDv7ev4dy26+KoEpajWeWZcct9Lt4gFD5zl:GEFZmowrtj
TLSH
T1456390F783B0867DDA1161F49A18AE1FCE6C0525076C38398AE5BE0AD3F2572E14275F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 79a5add39fd49ac8e6068b2a2d6427eb9fbfbad69f01d65fa4ca1b3487dfe34a
MD5 efba24730cc27d9a32e04d58f8be7fa1
SHA1 c398a84e69edaddde126adc9e9417859e8b0b668
SHA512 1e8c0122f70ef97e272a875d5dcd5cb6a54244cb58b6d7bf8eb3ed3f21d49b7addc73bc53b17fbcb181af848bdfd61ec5447614db69877acb47a170f71175a52
TLSH
T1C8D022331206B0B5A57D3EC2906AFC8FC32721605D23EDE911D4A89E663186D5507242
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe588325.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe588325.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 db97138eb70c1065ac604bac85e04feb0d390c17a34359d57e01cff6a2484abf
MD5 93f11560a9b4730d7dcf26affc4b0e71
SHA1 f15fab05a7feee1b5a2a2cb0af3fdce855f0c5bc
SHA512 f466b37c77e1ab12a47aeff6f5bdf4551f5e5c8f8bc75aa39de57fa92263e96676378d460e0e1258039fdd2dffa3dbfcc88124eab5862a3f4f227bfccc292350
SSDEEP 192:sxZHReyM/jK1Ml8MWOY/frsdOrKdpm73Hjb6+WNBZIG/YI+IhVIgrstXUqDK:sxZHguOY/frsdOGo3HUj1/5AtXxK
TLSH
T11062D8565A24C977CCCBD609BA317F53C6F904629A500D4CAAFCCA1C05EA6FD231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 22KB
SHA256 bc3bfca6899bed30a4778b11c87cd3ad3dc4ea761f961f8474d61d1d80e026f3
MD5 98b79f2319bde418b36f531c92a2dae0
SHA1 b76850afa80c5cd0e820fc7f80650169d6913bab
SHA512 e1c7c07b3bc9107cf8cc5df808c6e6054f9f03e6ab0a232d62a3b641def391b67d828e180100768c700e82b4ad56b05fbc3df1d755920983814737cd6bb37568
SSDEEP 384:sxZbneQqRm4Y/frs0yHwhxFHe/QD41fXxctXxSvStXxD:szeXRm4Y/f7yH6FHe/vSV8aVh
TLSH
T114B2D6535520C877CCDB8519FD317F57D6E91462CEA10E8CAAECCA1C04EA6BD2712C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 b4974ca32f65e7d6bb4586b1c2a25fea358c235849274d9c9825fdc07cf388a9
MD5 66ed17c0e96f9e961f7865f238eb9312
SHA1 13160a2b29ddd31bb7e1f4da1a5c70f9ad201e5d
SHA512 c247c984f2a9692a15008f01d37be983fd2da5bde163cd9fd1d3dafc32eb367220250c16e10c7b1906139348ba0ba1e226c2c741c86bfac26fc1adaa20136293
SSDEEP 384:sxZHQsm1Y/frs0OUgHUZ1E//StXxSvStXxD:svxm1Y/f7ORHUqaV8aVh
TLSH
T12D92C6575A20C8B7CDCA8909BD317F53D6E90462CE650E8C6AFCC91C05EA6FD2716C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 800d6cac9b24b95ea8e7d9f102feb528cce4aeade9ecf8fdef0c10640d06879f
MD5 b0bb16b2f8f9137362704dcc8ca17f15
SHA1 f83d50d1b3a2f3a2a5aad0c85900cfc0cb9dfad5
SHA512 81cba384d6d522a5b0b53dd953306f1e95b3efe9bf7d09e365857642903dd629ec0b688a3f4657f54c83a044da85f391bb28c7629603f0b5b182edea00256b52
SSDEEP 384:sxZHQsm4Y/frs0yKwrHU5S1E/QctXxSvStXxD:svxm4Y/f7yDrHUFdV8aVh
TLSH
T17892D6575620C9B7CDCA9908BD317F53D6E90462CE610E8C6AFCCA1C05EA6FD2716C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 22KB
SHA256 02c3dd13b347cce9895ea7dec77ff3aa94baee42356b063dbeae478168b1f6d9
MD5 07d7b6e2fd3e96195f8e45649997c589
SHA1 ff94b65b568efaee5ae0163646a5adb5a2304a34
SHA512 8778f0f07c52d75959e5b5025ab6866f96e63d1f325dc822e2475e1f1bf4a7464467e82e0339a1b85f603e80af313428609e6a766fc1ba9fd812d4c0be2b5fc4
SSDEEP 384:sxZbneQu2m4Y/frs0yowhxFHG/QS1fX9ctXxSvStXxD:szeOm4Y/f7yo6FHG/3+V8aVh
TLSH
T164A2C6575520C8B7CCDB8519BD317F53D6E90462CEA10E8CAAFCCA1C04EA6BD2716C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2647be54e4f3f334be9519f4bd611b0fa06a49d2d20bb41fc8f785be1306aea2
MD5 4a16838396e894dea8617446a4ccddcf
SHA1 fcca86cdc33d4c5aab23a940212b8116e5406d71
SHA512 cb096a159808aa56253805137afbec80bae0313cddd9c20fbcafb9b9020d7a32ead72abb32d1e2a41ed6325c6650edff1ae21d0ccd79ed3895dfdad3dc24f085
SSDEEP 768:eosqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9groHxl:eosqxXlWvJD6Tu1ja54LAs9rH/
TLSH
T1F1D21B3B694CC77E4F840E6DEC266FD76ED801CBA6988D4447FA894C03CB2EA11165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index
Size 72B
SHA256 7451e29a97b1dfa7793fcb83ab02b6c6a2e296c6ca1c215c10b40cf0abf37f15
MD5 be48fe78e504d4473adfb94a8271c229
SHA1 76b169b4ed0071b674f68c7cd1ec4fab47512882
SHA512 967796cb7028e2f030728ee667ca0dc085098d001a393a5a46db80780ee1ece8695b6f104783edfd32848382c9d42e68dbed5169f80f0c2a13c14fa564521db4
TLSH
T1EFA0021452C43009D08222F765D7A176325189A452455326C19100EDD8D07C5454204D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5989d7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\783ff0be-338c-40ad-8053-33ee09a8d709\index-dir\the-real-index~RFe5989d7.TMP
Size 72B
SHA256 ae4728457ba9ef88b82ac8218cc79d3e4e35fe4c998f275a56449456f257ee02
MD5 2a182ea53894945cee3fc8a7edfb21b3
SHA1 263cda74fa99c6a22e788ade287f16454ef279e7
SHA512 c2fffa8bacbea244adfa6c3a845003f960d4d93f9b39cdb24f00ebca84ed9b766e507847c1604d1e9eba4840916648389fa26e88677c4c8dc5118dd3f982b304
TLSH
T111A0026003998005D05211B2AED202953B41C9E56150130780990454DC905A05DC121E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b3a3daf6-4f37-4559-bfba-25e1f3ea57d1\index-dir\the-real-index
Size 72B
SHA256 00c328ae99dec46520ac578c2252957c011e00423ee039ec656a8d2cd4ea44c1
MD5 376e6d780c2441b5e5c4805d582324f7
SHA1 0ddfc4256f4b4aed6edb3e323f87374059962415
SHA512 b6f38e1e5ff75f6a2315d140f0659a34ce9755053d8beb83bd26c20c732cc065f3efe5ac9a9ccafc88a1aac5548c23d363e8f105b226f34941552626ed44b680
TLSH
T104A0025881801621C410B3B1105E5D60379299A0B5530A15649040DDED90381C2870FD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599cf2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b3a3daf6-4f37-4559-bfba-25e1f3ea57d1\index-dir\the-real-index~RFe599cf2.TMP
Size 48B
SHA256 ebefa7df047471bbc153856fd88dac428bc5c23074d35dbdf0e71e55520d7a49
MD5 9735ad67254c96746a94cf392667ae9b
SHA1 814161d686c042d3d169aa44b4b526e0d7c92c81
SHA512 654e8188ba77ca39ad761d3bd3a15881d2cf117dd5a545becdc80324bc731bb1390e00ca23dfc4d01225974015dedd952e73ddae2ea8f520800ce4b0d896bbf8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\bbfc1693-6097-454f-b94b-dd68c4f3ce0a\index-dir\the-real-index
Size 72B
SHA256 0078eb09a4dcf0b304e6d9d69e9db5493bc4a354641b6089af85d4699cd7118c
MD5 137baa687950baa7dd3c72b2ab97bc9f
SHA1 422fb4e9761b8af2eacfb414fcf7202ed36f4c65
SHA512 bc96ab88ddc1190450a50e4e0cbf93bf94148c06190df0dbf9cec7d6a62758c276ac87c9803e5c7902084fcebb06d7b49e10735f408bc022102b86473d961457
TLSH
T1B5A0026005583041E15116B651C2167073155CA94116876694D244DDDDF13E84B1245D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 2KB
SHA256 5b0938d33816bbad47350cb083cb53ca3ace690a137940e907ebf113e6081c51
MD5 50dbb39edbf6fad35684a043522b98bf
SHA1 36c6ebca5b2184c2293f20d58b907258a79a667f
SHA512 c4165b0e8c8e07c7d412b467490a2e729c4038457e17aec24b10858d0c5963f21da9ccd53b9430babf1da79ea69e7425d80982e0496b700eddc1586481acad0b
TLSH
T13551A54E8C4B2F22DD7C21B228BA4849373538DD17895A13B5ACB6703CC73292DB5E04
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5910b0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5910b0.TMP
Size 1KB
SHA256 a07488fe84d8118c3e16c86956b60f50707d2b3cfd716d878f7c613ec328b9a7
MD5 d54f82f2de6281720d11d924bae1a24f
SHA1 bfadb9bf5a513de98d9071a1411309907fdc519d
SHA512 eb4bdfdcbc56d58b3ceb66861a959437724114ab3d6db446301020813d64d5b5435dffb17cbcc68626bbbc56218d400e6c9d08a00acd637688a38dd7fd36d41a
TLSH
T12221408A4692490FECE054B60147A4F43370C900A322B3D3983A673E5C3479D5E4B1C5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 7d8fd0b5276599787dd0461179a11a2ce1f23650f36cd8436fffb5e0cd7883e6
MD5 d56d74b84409aa5af0ab870c4e337ca4
SHA1 fbbb46f710099466206525b68b37f92029604ab7
SHA512 8e9fe91899dd9fe35a4b5e89dee825a585ed3e0641be40611434d940bb9b7685e0259472f8926603de992fe4e1773cc2958e94c8752270d86e9e66abdd85cac7
TLSH
T1ADF027762BF71C08BCABD3EF147A14A10824BC64C892EC4F0115B597D072761682DCA2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 82c9bbe6c95f92a3aa5078ff99026aa09bdbd8b8e61fb69c6aa9c11e4e907f05
MD5 c0beaa446903853afa6bc86109111ef5
SHA1 c052b72b7c619dcf1c94413bbe22e669784c1aa6
SHA512 8357fd39e22796efc7fdfc73c3470a5d495a77f24f007a739b62813a247cd10a1f6db57e2733324771f776a9e0832fc80c41f937f88c75cc03049c0227ea3c89
TLSH
T189F05C772FF71C05FCFFD3EF147A14A10915F864C8A5EC5F0115A5979072761286AC62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 621234b5b5db52e1db7bd2ec7b2eb76261df3387e59ef03cfc340ef0af069e55
MD5 c882a8f9140cf9680af199ad58424849
SHA1 43bf96f307a7709c105dc6946a63336aee2affb0
SHA512 829e5d77d6e6489eab1933a68ad2b7494a8be5a1fff235218d13f17d10cee33867be10787bbd0d5a43d6709071ad5f54c1c471aec8fed7648000e88c471d040e
TLSH
T175E068B62AE70800ACABC3EE087244D60410F468C891EC4F0029928750622A03821C26
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c7deaef63ee3761df78e4009d08daf305034a541\38b95192-74f0-4e52-b3c4-576cbf447594\index-dir\the-real-index
Size 72B
SHA256 115f93251b411d7b4ff5c8eb820c719b47fa1b601f8ba7390928ba30a6adbd19
MD5 ac88d7f4441821b2f93d428b6a08fcd1
SHA1 9d2f2ed3a5111c4c90ccbce9434ad89cd3672baa
SHA512 4ba5b5b1fd33fa405918ad2196930e292cbf730a938513097e6d5c97b9ca6984000e5ac9e4483aa284e819ccdc63669091134422091793ca49c760d998fd1b65
TLSH
T1EDA0023A57CA09C6CC5452B0625223C432704C10D11A060142B051988DB4DD0C513010
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597d64.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c7deaef63ee3761df78e4009d08daf305034a541\38b95192-74f0-4e52-b3c4-576cbf447594\index-dir\the-real-index~RFe597d64.TMP
Size 48B
SHA256 daba7bf1eb8142376ca2e0b8e46e4ca1899e6600d0d78b7f4a4341daaf2b2985
MD5 6c70b196525025b7c4fea1661dcc88b0
SHA1 0fc33b229221c38d26390c93408219f8f12ee1f4
SHA512 fe882486a7f875ad357d7f05368ef1f74fe859801aca67473ba8454c11c1a82bf384c7ae3f915a36991be23dbf127ef4bf0ed7a6e6363aab565e8101d79684d3
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c7deaef63ee3761df78e4009d08daf305034a541\index.txt
Size 142B
SHA256 a8d7918b3799e39f243ba384b4d11c364d273d71eb71daeea46b5a85df1539d0
MD5 2d7002006bfda2f4007fe79e27ff1385
SHA1 00399155c20715bacaa3a81d63638beab180d17c
SHA512 24d67b19f50bb0c4f637353329eb4dcc671703922be8691f7e41b744c882cf55110d04de6f94ce85483ff436eb6513473f8c0035e6ce607b8807a0487a26a845
TLSH
T15AC02BF31030C0C20F74D8C47050B3DE778201CCC591A8C0BC3345C00501003809AFED
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c7deaef63ee3761df78e4009d08daf305034a541\index.txt
Size 145B
SHA256 3ae1f89da8181a5040bc66bf48d49659aa77961834e0030ce0ed9265081f8216
MD5 66559bfed20a8872571915b6cb3f1568
SHA1 0a1bac67f6191267ee43b0bf887c8012b6625e72
SHA512 1533b39bdb62ed4105260da4da4253cf022f8285e053a2803eaa4767a82045a81ddcf20904c6ffeb9f4600fbfc1a661bba054defc84b8d91e5304cd55ffc48aa
TLSH
T1FCC08CF3102081C14FA098C47090F3DAA782018A86A9AC80AC22458001090038059F69
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58f671.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c7deaef63ee3761df78e4009d08daf305034a541\index.txt~RFe58f671.TMP
Size 149B
SHA256 8f69a181e9331e65c2d5637fbb1f1554bba2988bc0810e69a4f20f8956892f85
MD5 f9d281ae66fafaa7742c6e9f816c5582
SHA1 5bfbbd703ca20297e633df742d0ed4312eda20d9
SHA512 6f59c17b972ff3e72103f9209ffcc5dc33645d6dd2b45aaed7177fa5db4a1bd0ce407058a54906205f805fc58db6b25b6963191fc9a6306217bd365cf5a4bf17
TLSH
T1CAC08CF3113080C50F6194C0B060B3CD67820DC88981A8806C23798015310038099F69
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 54f97c7186fc9f05a68c7044e040839f5f6c67e81f426f579bd2f94d5813cda1
MD5 3b2707d409fc5185ecbf83a4c5ac1128
SHA1 31f4802052dc5959c01e949e16007734d9490b8d
SHA512 82dd675505e28fd59a62ecba5525d0a9cfeaf70da33acba1fab30270394d5da68158e450e8dd1da277aee9bdaa9aacf8b733bdeea903e97117edde6148a4f92f
TLSH
T149A002A49F5DA00ED639067021A6518173B85DDB015A3B414C9C90EA9CAD1D152F6145
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c1a5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c1a5.TMP
Size 48B
SHA256 83943313bf45d0635537e26aa2429ca50a41876a3ae6aaf49ec0b1547b8468cd
MD5 066443792f0ffe3d239dadbdcde32e69
SHA1 e3b08a570d5c8c8ed1cbaededb7d5a3f5ab33ec4
SHA512 199ccd9b55d464c9f0cc4de4282943cdfdb2e533d8d55a4208a80ab3a04dd056220a40ea54ef6d87a787032a31fe3e1170be7afde13634625102ac94c077b199
MD5 SHA1 SHA512

Submit Download

fa8723aba88be35c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\fa8723aba88be35c_0
Size 63KB
SHA256 38242b77fbb3ec9862e22770d0f5ad9a9ef42fd41b66f006b12df7e15992d983
MD5 3084e2c6e2112f8be5267fcff78df3d6
SHA1 5c7509ac1c3442947ddb79c2fc2617118285df03
SHA512 588774bae5a0792ba65b7570b3eb4034b1a86ffffc53d0b16bfdcd48c24f4fd6208afbce2e7bd618c9f4747b03443b01f6d67d2ec3ccf4217a57cbeed2de80ec
SSDEEP 768:Uc+e1DiIGEUmiHx2Yp3eEFfgoAWWhrJTt9/XoZ+UyUC74Vm3BoW+zmYe2GH8Bwf0:vApPx2YTqtRXyy54w3iz1e25B+zw
TLSH
T1A0535BA6337174B7427BA1B180AF130B713BE157F40485F8A194EEE54B44AAA1277FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc6a653045436920_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\fc6a653045436920_0
Size 63KB
SHA256 f189da103821a2ea501eb66ac4bf552a5694fd455104a63a7402483f087423f7
MD5 e3705f1f24060e30c45b0a1a22e0f491
SHA1 0ddc99cf26c0b187ebab3a8c379fd3e64ee0b15d
SHA512 f21d4a77237c8a18f4a199a8c44af82d508d8132a3da67812f276fc944a26adf8f3eea7a244759f2a36a8bb2075427691af333e4524ea36bcef52af89851f86d
SSDEEP 768:lc+e1DiIGEUmiHx2Yp3eEFfgoAWWhrJTt9/XoZ+UyUC74Vm3BoW+zmYe2GH8Bwf0:mApPx2YTqtRXyy54w3iz1e25B+zw
TLSH
T107535BA6337174B7427BA1B180AF130B713BE157F40485F8A194EEE54B44AAA1277FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 600B
SHA256 2c1c3fe7d05df30698f5a1aa51c0f0ac74bb48a2ec35c96f13cb79cfd06660d6
MD5 a8ae796f8e47dd67e58a9e574dda8abc
SHA1 411495636f14d4684e4c54b3a89244be6c69d3d6
SHA512 8a9f93991b915468e6b1fd98fb17c6adbdedc47952db93d2a13bf046d49552004b2427cd50f1e8e70b852bdae9220b4c13f7a79a27e5a41bb5037f5fc88a23ea
TLSH
T19AF061B45C504709D898D57024F30055BE6555EF3790471B80A55728E413E99B349C3E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 55582059867ab77f7c038ad914260614d4bbab470291d7786431c76195276bdb
MD5 2f0bd807b3bffa380ef6e442b132db24
SHA1 9f39c6dc8e6828b4c4df1f731c1d7ef8b1b61c72
SHA512 d95c5d351847c1cb71938060f271ea3ba13552b0e46b584c55e0a8e465b3a8fc1d9e5b9dc10a3aa2ab787352681b8df1d072584aace43316f769f549221c5b6d
TLSH
T195A0029103891B07C151D67031D20355B336E91029065B0741905144DC505905F02000
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 600B
SHA256 90045e82b7de89194bacce0b7ee1c7fb79f4fb4e3340161fc518d730b8049b9e
MD5 b068bc265196849c1af1c05a2fab134b
SHA1 28492f216db8dd73b8e2e22bc5da949a0a860118
SHA512 d117065eb5747f09edcc94480d63e113481ef06d0007c2d3fdca5a28f177d6cd2e01da9d04b9bba112d4e2f8aef15ee94a09c06298319143bcd57401c4d34e7a
TLSH
T163F061F49C508719D598D57025F30445BE65559F3751431B81E15B28D413F59A349C3E
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 42bba818f18e0fa143eb9e6c84ccc30f4b03aed063f4ef418e7cb27be4fd8820
MD5 431d6f148f0ea1c665402bab2d3ebb8f
SHA1 e887d143cf0f042d4365528c698d762094a74155
SHA512 3d50a8080ff43eede4af3e906ad3b53ed384a385590f16f3367ef390a622a3a0ebbbcf507d265e63e4a8b9a9c81b7c9294b43ba81cb6a43b811754227bb85a7f
SSDEEP 96:KYbaKYIKRktgESKK+Ea7lCk+KqLCe+mckDO0f6KQK/6u6ucKnqv:ExV9/7P0
TLSH
T1D7C1041A31760A1339BD3988B66AC6361F4132B33018B46F7FB840614E6BE125DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58fb43.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58fb43.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ae17f81a31d0c37df5bd77565d72c557a55302021d6245f1379c89a65c1cf9dd
MD5 0da52acbd9018ad95202d1b3dbbe39ff
SHA1 fe3efc696e4ec98774952e4675467b5fc51111f7
SHA512 e38b5d176147e0156c889306ebea91ab0621e60c0ba2148295cd4f334bb3e89c086fc7c24ee7bf08f171536a818b61eaf198ef8e39841114e0453799ef914761
SSDEEP 384:FtNn/s3n9SfsNFmTwHv9bNdsm2VRN5dc5sJrIRScjmwL6:Fj+9UCxsmUH5CmhIR1j/6
TLSH
T1CF929D366C255C7B4EE25186F84736138FB891A39AC92FC1E5ECAF0C01CA6EC0316D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6eb9af744e57731c2d04659e8849ce080183555989b861c40d8eef3466583529
MD5 754419b088966a7d7d11e46050b1371c
SHA1 7367d8bc23a7900da5b22e6cd3fb676ff03cdfa7
SHA512 4f64fc8e9db5abbff6c250d981a6e54a9307e048f8bd3c0bc163b946725951ca15406d7b0706d2427274b95d4b31f9fef9e475639d53a7c646b6988c9fda3f36
SSDEEP 192:tONnm6JkRtQmiUy2qW+RNW+Fd102owh3gRJ7U6:tONm6UrsW+RN5dcQm7U6
TLSH
T13D02D835AC382CBB8EF26D4AB48727175FA4217BF9992B80E6E81B1C01D765C1347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 87932bfd089450b0e9007fcfcc1263378843425e932a9d177734063dd69d3be2
MD5 a49615c67d9d05b1a0969cf2ce6f4ae8
SHA1 1e6e1c14314a411dd7267cf98e73ae92f6b1b53f
SHA512 65392a25ce518aea523fab61d3f7f13886f5b33a9965a01ebd55a900140a15b1445432ef9ce8ba364dd467aa13f09f42c0c196817329293305cd81967cf4e8b7
SSDEEP 384:eiF1tNn/s3n9SGzsNf8TUNTUlIllTwHv9bS1sRVRN5dc5sJrDRScjmwL6:1F1j+91ewgYUs3H5CmhDR1j/6
TLSH
T164A26B375D548D7BAEE24A85F94B32138FB851A7CAC52E91E6D8AF0C01DB1EC0306D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ba702d8ca6f0768cf445ee1a162750878b706754594ab028017a9b5fa66ca7ff
MD5 ba8d44ee01756cafa3ac7d98a34dc61d
SHA1 6129a4f1e6bd80a0c1e684f33b0b22ca2a61c81b
SHA512 f629a50fd6dcfd2530e305f02ed579fca8499362e142cae5740643d90a917558678f906ce1461b0cc65d9d6fb53bdb9b7c1dafa8ba0730a3444182df2e27ece0
SSDEEP 384:etNn/s3n9SfsNFlTwHv9bSusxVRN5dc5sJrIRScjmwL6:ej+9Up7sXH5CmhIR1j/6
TLSH
T1CF929E366D255C7B5EE25186F84736138FB891A79AC92FC1E5ECAF0C01CA6EC0317D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dded13987b30e607e4a321cf08f7b0d08e42569de9c707110d994f9d8a37e81d
MD5 ccd352fef89f843b8fcf54726a7c466a
SHA1 0839282cb3cc9f5c812d7369009b309ef474baed
SHA512 cff72a30446550f6e864cb0e4f7f06efb514cc8495dc113b955d532652f863089389b776f045a49233ca61996c6f89b90ad031ead02ebd35bf4dc6f9a1eeced4
SSDEEP 192:MON46JkRNQmiUy2qq+RNW+Fd102o1U2tSJrinVcUqD/U6:MON46ULiq+RN5dc5sJrvRU6
TLSH
T14A121A366C245C7B5EE26546F48735135EE45167EE8A3F80E1EC6F0C01EBAAC130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4c2ca03ba0a9c85aabbf1a8b15336c43c6febaaa280474628c686a65840f07d5
MD5 76f0a786db326c93d706cf3f15b4d871
SHA1 b12469b29591d2f0a838f387a3d45c8745b3526e
SHA512 3722d6c5d48387b12bc55f1ddf6d9541b436d72aabf6c9c9e827b61aef3448242d24fd524c5b8b26363a2948cbf11124cdaa283a23acee9d5e5f52e5ab9a8ddd
TLSH
T1B0E002055341407EC83C073100E32B352BE1C46516F613068170126C1C637012FB1FD0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 8b8057ae8ce247dc6a73c449a83cc01b121ab952f8afefffb35ff64e485c668b
MD5 4764cab0a009b4c75ffc2b2b39693b22
SHA1 a512f7b59f6f4e3665ee18f235107a1bee735889
SHA512 2bbe9205e641c14992aa2f1d5757116bdc89df519052d4f9546e35ba7a35d58e687a26b41a26e0a21887ebcd510dcb588c0d2beebf89e9036989a8d3dffc0db2
TLSH
T110E00907A78280B9C82C073144A32B356BE2C8A926F61357896412A82C636422FB1FE1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 236ebf2f4e3af5463d4a6b54f99fee10c06a6c9589bea115358363a917bada4c
MD5 7f740d762c79fffc6095d6388703001b
SHA1 348f5a2d9df089039cbaee5bb0deeae9c58ea3be
SHA512 902ff3accb29eae5548d5c1552ca81fa1964390d4cf389893cb3958dffec231157d9c3dcc55dddc43c27b119f9a8aada4cb45e906a7e34ff46d4fb486fb78204
TLSH
T14CE00207D74140BDC43C073144A32B356BE2C46525F65357495411583C637413FB1FD1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3a065955eeadbe1e7beb9e738ea3ce626149a6348e537e1ef1396cb1e0dd3e09
MD5 1ec5f6af98684f4fb732564061f18030
SHA1 29389f4c8c8bbef6bdb5380e146a9f07b309423e
SHA512 57a8f210479f9d04413b98aae551cdddb2606c885dd24eb75748714cb79c63510c6e70d988b428e3215be7b8645420968c7d634a22329bfb0aa13d242eeef0f9
TLSH
T1F5E00807D74140BDC92C073144A32F35ABE3C86525F653578A6411583C626412FB1FE1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d4ae9be38cf7b3290b4c5ff4661cd203cedbb59f05ba9c9eab639f1f29df3874
MD5 ffb1bd0fe59332f49b895a71428301e1
SHA1 2c54c783c61d8a64dbb7ca7b3d698fd5b0460f86
SHA512 c82b6713e10094e19deb0d76da4102697f6975d89f30bca3b8044a10c755ee1fb549a38ad6e7f77b20099b0a8fa82fa7059e0bddced594d1906071476e1fc73d
TLSH
T17EE04803D34140BDC82C033100A32F30ABE3C86422F203438A2011683C233013FB0FE0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1e04a2d392795b010c46a9f9290d491096ca571ab9a933dd5e09016c8b0d7963
MD5 df992b3a5b3a1677f449d3c6f791567c
SHA1 adb9bd720fcc8a1a8c4a71f450d4853ad72ed2cd
SHA512 5a91d73af46e9700a52f4c37d58a6f1df2c8ac931406d6a14fddd797821ab571030af9ee81f6e1d59cdedc3f0df924c363c80569e4d333e3535dc68c6a212043
TLSH
T1EFE00807D74140BDC52C073144A32B35ABE2C86525F653578A6411582C626412FB1EE1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe589a57.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe589a57.TMP
Size 392B
SHA256 edfa2c7d5c8e94c9f874ed148ac6aa5fc82e383d43c9afd4950f096b9913bcf4
MD5 f860c5a5b0047e2c26c5f00539e5993b
SHA1 dd93fb0ba44db7658f245ab42a97f6e86a921d24
SHA512 f9eee0081b39d5253012fea5bf16796c81eb9c69f425a4c14519eb08f3f308cac6d4354c5c32f76e9379a37dd452f4b9c7b4b1c84790424df4818d8c41039912
MD5 SHA1 SHA512

Submit Download

eb3daf04-b54b-4f15-ba38-c8534d10c055.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\eb3daf04-b54b-4f15-ba38-c8534d10c055.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 200cc203fb80a1ae386e21146821b896c590229f8e1b318cb86d62fde98bb721
MD5 d9c32198ee1cc135c1e97ce93636495f
SHA1 9b496c311a92e509a467839e0b1ff36912a624af
SHA512 47e25eed0f4576d126c9d82d295d10f4ce3f35233129f1febf70e737e8165d3a5a977b51fc1cc20db0eb291da74ed5adefee13b01ac0c4d436eedf2e30ebf612
TLSH
T16041E75CA6EE1148B3B76E56EBF7A86E487BB8772E46C45E00110D4F0963E41C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 825200e58282e96002efa714245d2c9abdc1548d185024ae584fe14291fa252f
MD5 6d7993e612265ba425f62837c311d232
SHA1 077edf5939f3dba6675b8365d9e072e8bdee3a99
SHA512 1f40e89f1869b9cccbbb8d112fe025140322fc5fcbf25ab665913dac8e70ed1abbe901325c3fe9825ddff14a76a5a038adc04199efc7a96c40ace332ac0b22fe
SSDEEP 96:PRzRJcOnyw3n7NDhiRJJ2qrweeq2NkcRJruWNS4DRJnIuWNB:5zRP72RPAR5lRBIT
TLSH
T1FF02C154EBE62616F2FB9AB1A5B27701BF36F9196D14DA0D0181820C4C32F00DE79F67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 10KB
SHA256 0b7486f4b8fe0b2be88cedb27249c817f0e52b5539a953ac5ea71b56074748e3
MD5 c51a36719acd925ca1438ef03dff25b6
SHA1 207273f030dfe460b2a3ce990e3465240fed764e
SHA512 0aca6a6e9d068eb2f40bc7efddb8cbda41361d35334f7831b3e2e4f1425a7894750ac214509b20d166b976ce1e0fc165d176587f570f4bcaf0af6a2993722dad
SSDEEP 96:f9RJTuWNFiRJcOnyw3n7NDYiRJJ2qrweeq2NpcRJruWNSFDRJnIuWNB:FRRyRP7NRPnR5yRBIT
TLSH
T19D22C354EBE62656F2FB9AB1A5B77711BF36F9196D14CA0D0181420C4C32F00DA79F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avast_secure_browser_setup.exe.crdownload

Path C:\Users\Admin\Downloads\avast_secure_browser_setup.exe.crdownload
Size 6.8MB
SHA256 798e3802db8a96ec665a3edfdb3a4f14db6db6b5a168685cc16a7230d37e7739
MD5 c2ddf5d1219d1b396992eae1a7d4c4be
SHA1 7ec8ed03b7d086cd552a4ec08f47e0ce3750eb4e
SHA512 380d7c7c3bedd41a2c72e4be0ef78cead3547a5b45e33f531b5a7c7eb3aac01cda2e7ada2fcdce468751b1f70ef291c15714a5767c4ea32e33c4b9b70efef12a
SSDEEP 196608:Mt86rk+KjsHqnfKrxEk2+XdR/MnPQtFRkCa:arkZjUrb2+XdRuazkCa
TLSH
T16D7633893F21C516E7FFA838265C3BD35634AC24AE71B1811398393C62B3DFD45166AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download