d0e7b278ee83b5abe617cc0836d87fcc0ed4a310ad4e01ef13e1ba99044e2659

Analysis

max time kernel
143s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 09:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
v4 loader.exe
Size 11.6MB
Sample260728-k715datbke
SHA256 d0e7b278ee83b5abe617cc0836d87fcc0ed4a310ad4e01ef13e1ba99044e2659
MD5 e0a5cf8d12351b20ffde42439be2e60b
SHA1 acfc515a7671669a2b46f0af910ab3a0c0958783
SHA512 4ad3f11dc5482d2eccd66aec5f8da21d4455977f67c15fee82d237117eac6b6d3c0f20d745c07b2c42c9871df8533c636d8e4d5b91a7a7ede8a87b5fa2108dae
SSDEEP 196608:oThcd3w0AEYIzzXEpXnH2ph1iut1/1QpL0uQg+xeukjItK7vocgcVFS83:UhA1FYAXEAphVtrQSg+xeXj4K7vZgyS
TLSH
T14AC63398779808E8F8BA413CADC0CA2793E1B8611BA2D3E717F14C551D376D8DE74BA1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 11 IoCs

pid	Process
3420	v4 loader.exe
3420	v4 loader.exe
3420	v4 loader.exe
3420	v4 loader.exe
3420	v4 loader.exe
3420	v4 loader.exe
3420	v4 loader.exe
3420	v4 loader.exe
3420	v4 loader.exe
3420	v4 loader.exe
3420	v4 loader.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\te\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\ro\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\ja\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\zh_TW\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\ml\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\uz\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\si\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\it\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\sk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\es\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\sw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\fa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\kn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\vi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\msedge_url_fetcher_432_1485508442\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_108_1_0.crx	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\fil\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\id\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\lv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping432_2027291178\_locales\cs\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4832	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297037490714320"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{09F37ACA-77F9-414B-A920-E1F5A817851A}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3611646547-550105268-947503007-1000\{6BD88D01-41F2-4791-9E0D-FA6A4BFFB74E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4316	msedge.exe
4316	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3420	v4 loader.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe
432	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
432	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2872 wrote to memory of 3420	2872	v4 loader.exe	91
PID 3420 wrote to memory of 432	3420	v4 loader.exe	92
PID 3420 wrote to memory of 5320	3420	v4 loader.exe	93
PID 432 wrote to memory of 4724	432	msedge.exe	94
PID 432 wrote to memory of 3488	432	msedge.exe	95
PID 432 wrote to memory of 4832	432	msedge.exe	96
PID 432 wrote to memory of 3488	432	msedge.exe	95
PID 432 wrote to memory of 3488	432	msedge.exe	95
PID 432 wrote to memory of 2656	432	msedge.exe	97
PID 432 wrote to memory of 2656	432	msedge.exe	97
PID 432 wrote to memory of 4936	432	msedge.exe	99
PID 432 wrote to memory of 2336	432	msedge.exe	100
PID 432 wrote to memory of 4936	432	msedge.exe	99
PID 432 wrote to memory of 4936	432	msedge.exe	99
PID 432 wrote to memory of 2336	432	msedge.exe	100
PID 432 wrote to memory of 2336	432	msedge.exe	100
PID 432 wrote to memory of 5324	432	msedge.exe	101
PID 432 wrote to memory of 1464	432	msedge.exe	102
PID 432 wrote to memory of 5324	432	msedge.exe	101
PID 432 wrote to memory of 5324	432	msedge.exe	101
PID 432 wrote to memory of 1464	432	msedge.exe	102
PID 432 wrote to memory of 1464	432	msedge.exe	102
PID 432 wrote to memory of 408	432	msedge.exe	103
PID 432 wrote to memory of 408	432	msedge.exe	103
PID 432 wrote to memory of 408	432	msedge.exe	103
PID 432 wrote to memory of 904	432	msedge.exe	104
PID 432 wrote to memory of 904	432	msedge.exe	104
PID 432 wrote to memory of 904	432	msedge.exe	104
PID 432 wrote to memory of 4988	432	msedge.exe	105
PID 432 wrote to memory of 4988	432	msedge.exe	105
PID 432 wrote to memory of 5848	432	msedge.exe	106
PID 432 wrote to memory of 5848	432	msedge.exe	106
PID 432 wrote to memory of 5848	432	msedge.exe	106
PID 432 wrote to memory of 1460	432	msedge.exe	108
PID 432 wrote to memory of 1460	432	msedge.exe	108
PID 432 wrote to memory of 1460	432	msedge.exe	108
PID 432 wrote to memory of 2808	432	msedge.exe	109
PID 432 wrote to memory of 1500	432	msedge.exe	110
PID 432 wrote to memory of 2808	432	msedge.exe	109
PID 432 wrote to memory of 1500	432	msedge.exe	110
PID 432 wrote to memory of 1620	432	msedge.exe	111
PID 432 wrote to memory of 1620	432	msedge.exe	111
PID 3420 wrote to memory of 4428	3420	v4 loader.exe	112
PID 432 wrote to memory of 1240	432	msedge.exe	113
PID 432 wrote to memory of 5460	432	msedge.exe	114
PID 432 wrote to memory of 5460	432	msedge.exe	114
PID 432 wrote to memory of 5460	432	msedge.exe	114
PID 432 wrote to memory of 5856	432	msedge.exe	115
PID 432 wrote to memory of 5856	432	msedge.exe	115
PID 432 wrote to memory of 5856	432	msedge.exe	115
PID 3420 wrote to memory of 2716	3420	v4 loader.exe	116
PID 432 wrote to memory of 5080	432	msedge.exe	117
PID 432 wrote to memory of 5080	432	msedge.exe	117
PID 432 wrote to memory of 5080	432	msedge.exe	117
PID 432 wrote to memory of 1368	432	msedge.exe	118
PID 432 wrote to memory of 1368	432	msedge.exe	118
PID 432 wrote to memory of 1368	432	msedge.exe	118
PID 432 wrote to memory of 3424	432	msedge.exe	120
PID 432 wrote to memory of 4244	432	msedge.exe	121
PID 432 wrote to memory of 4244	432	msedge.exe	121
PID 432 wrote to memory of 4244	432	msedge.exe	121
PID 3420 wrote to memory of 4584	3420	v4 loader.exe	146
PID 432 wrote to memory of 4596	432	msedge.exe	123
PID 432 wrote to memory of 4596	432	msedge.exe	123

C:\Users\Admin\AppData\Local\Temp\v4 loader.exe
"C:\Users\Admin\AppData\Local\Temp\v4 loader.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2872
- C:\Users\Admin\AppData\Local\Temp\v4 loader.exe
  "C:\Users\Admin\AppData\Local\Temp\v4 loader.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of WriteProcessMemory
  PID:3420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:432
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2ec,0x2f0,0x2f4,0x2e8,0x314,0x7fff68b0c188,0x7fff68b0c194,0x7fff68b0c1a0
      4⤵
      PID:4724
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1892,i,13323616986390247113,10338046776531464712,262144 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
      4⤵
      PID:3488
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2152,i,5320260662038972785,6932225678899790052,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:11
      4⤵
      System Time Discovery
      PID:4832
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2676,i,3504212914613790301,6551425226285410942,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:13
      4⤵
      PID:2656
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,4736197360257250464,17140306875790480168,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=3848 /prefetch:1
      4⤵
      PID:4936
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,9780638677927061434,14251231422097249823,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=3852 /prefetch:1
      4⤵
      PID:2336
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,4130854426492782416,13424571349276290442,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
      4⤵
      PID:5324
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,8887168159863787876,2193194138713425416,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:9
      4⤵
      PID:1464
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4512,i,13563920135480937285,14645846472923079602,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
      4⤵
      PID:408
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5428,i,13000578815030439560,6857063145209800716,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:1
      4⤵
      PID:904
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,1183253367176529493,14435695879102570512,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
      4⤵
      PID:4988
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5756,i,17851005688764088641,5879847401880532209,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:1
      4⤵
      PID:5848
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5940,i,15243237729902088513,3817457086088771815,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:1
      4⤵
      PID:1460
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,15878977884245485867,5378684981151819050,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:14
      4⤵
      PID:2808
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,14477908326243749504,4563480101222425664,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
      4⤵
      PID:1500
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,15631474864431574845,1550435789260892378,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:12
      4⤵
      PID:1620
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,14308847203264930118,7451469270462149844,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:14
      4⤵
      Modifies registry class
      PID:1240
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6884,i,15499379823141885436,11696162253268515362,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:1
      4⤵
      PID:5460
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7088,i,10846769119369698413,13218032212272805617,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:1
      4⤵
      PID:5856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7268,i,4782993158431340807,11907556704261814244,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:1
      4⤵
      PID:5080
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7284,i,11206183282404810367,4832769723194963663,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7424 /prefetch:1
      4⤵
      PID:1368
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7076,i,4378012413980777336,5618139082531208399,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:14
      4⤵
      PID:3556
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7076,i,4378012413980777336,5618139082531208399,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:14
      4⤵
      PID:3424
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7812,i,3459620053918264690,2889725959135650796,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7832 /prefetch:1
      4⤵
      PID:4244
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=8040,i,1121293545281297747,13281103709979684839,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8116 /prefetch:1
      4⤵
      PID:4596
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8264,i,2105269741513581661,12569722773671222013,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8292 /prefetch:1
      4⤵
      PID:4340
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8244,i,13467648494887438940,16051962143686121589,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8256 /prefetch:1
      4⤵
      PID:2172
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8608,i,17438857306375039532,4844803600158441949,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8636 /prefetch:1
      4⤵
      PID:2208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8100,i,865107257900007017,16826595336281408275,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7808 /prefetch:14
      4⤵
      PID:1648
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8988,i,14462568916233990995,4736765019577287711,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8992 /prefetch:14
      4⤵
      PID:264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=9172,i,4527019518486191976,2404897090977117728,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8820 /prefetch:1
      4⤵
      PID:6812
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=9320,i,4755980095855066501,12600085489522910756,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9348 /prefetch:1
      4⤵
      PID:6884
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=9516,i,3500069861849614046,865560468628916744,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9520 /prefetch:1
      4⤵
      PID:6924
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=9780,i,4016953756348009804,21932673409058745,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9784 /prefetch:1
      4⤵
      PID:6988
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=10068,i,372136090867492559,6858964582927511942,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8416 /prefetch:1
      4⤵
      PID:4520
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=4016,i,16817458906819433464,6658147381494852384,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8376 /prefetch:1
      4⤵
      PID:2004
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10500,i,8956741774937634991,176945121298134952,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8304 /prefetch:14
      4⤵
      PID:6196
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10364,i,5122942347111220196,115358374621468430,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:14
      4⤵
      PID:4132
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=10124,i,2128181974668790345,667152083660820258,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:1
      4⤵
      PID:6276
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=10376,i,4801871253877560011,4585837986428665869,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:1
      4⤵
      PID:3556
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=4292,i,16877485152523278564,8718873943306069898,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8368 /prefetch:1
      4⤵
      PID:2100
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=5596,i,825661127291030727,17194151176185279866,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:1
      4⤵
      PID:2136
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9756,i,17483709512605521841,6436335544080837819,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:1
      4⤵
      PID:1360
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9188,i,9376463095141576391,12734536395670228090,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9052 /prefetch:1
      4⤵
      PID:6224
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7172,i,1174421454562700089,7299796168477436276,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:1
      4⤵
      PID:6220
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=5956,i,4413503227133390967,9281228313752833778,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:1
      4⤵
      PID:5432
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7096,i,3508058147702274150,13248967367147906665,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:1
      4⤵
      PID:5864
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=7148,i,15046558679925819170,17246986737094910836,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8308 /prefetch:1
      4⤵
      PID:5872
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7176,i,11064847548276697109,5934419397719887534,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9068 /prefetch:1
      4⤵
      PID:6228
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=6092,i,6706912281851473578,867957205336522119,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:1
      4⤵
      PID:6252
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8836,i,17138266444180910436,2097342140606443904,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:1
      4⤵
      PID:1600
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1276,i,3915474887929538340,12818059067492152126,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9028 /prefetch:14
      4⤵
      PID:5828
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=7212,i,4311827359851005113,8286477670308470904,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9056 /prefetch:1
      4⤵
      PID:6248
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8392,i,3747634665136715248,13016999962319959403,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9020 /prefetch:14
      4⤵
      PID:6308
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7740,i,1237098782761998383,14175899660567955602,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8888 /prefetch:14
      4⤵
      PID:2012
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=8388,i,7239435003927863766,11121861053971759458,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8968 /prefetch:1
      4⤵
      PID:4308
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=7780,i,8615669463790472246,10254365432486923344,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8960 /prefetch:1
      4⤵
      PID:6380
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=4296,i,14338869308498173128,16888904049888874643,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8812 /prefetch:1
      4⤵
      PID:6352
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=8596,i,6294056498321897002,1279198715748504159,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9092 /prefetch:1
      4⤵
      PID:6368
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=12620,i,174965535047127361,6685453863974320903,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10232 /prefetch:1
      4⤵
      PID:8084
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=10336,i,5757494700182666988,13752387350687234767,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9784 /prefetch:1
      4⤵
      PID:5236
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=12516,i,15533035578201923478,16667905013670722592,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10660 /prefetch:1
      4⤵
      PID:5064
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=12500,i,7582387047574111804,4581327351225884229,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10228 /prefetch:1
      4⤵
      PID:3264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=12800,i,16070733742244452323,5298615023019592546,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10644 /prefetch:1
      4⤵
      PID:3220
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=12644,i,2687220584812759716,12755121932814439293,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10700 /prefetch:1
      4⤵
      PID:8144
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=12808,i,6246628973838278983,9721179100754152949,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10648 /prefetch:1
      4⤵
      PID:8152
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=11728,i,16592574680660691309,10142294930682361036,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:1
      4⤵
      PID:5348
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=12380,i,3021693986200484532,16166612964259514173,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10904 /prefetch:1
      4⤵
      PID:4160
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=4292,i,662442783790332950,6691425608021052015,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9796 /prefetch:1
      4⤵
      PID:5688
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=10356,i,3745589917155317558,16324677989010523733,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9800 /prefetch:1
      4⤵
      PID:1088
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10328,i,6730497636404549994,7434742713665652306,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=11612 /prefetch:14
      4⤵
      PID:8176
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=10264,i,14199737932167541219,17462561344707281132,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:1
      4⤵
      PID:6308
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=8100,i,2644379689182435148,51163231399934913,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=11564 /prefetch:1
      4⤵
      PID:6748
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=9724,i,9025695256465271751,17506784406222755871,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=11640 /prefetch:1
      4⤵
      PID:7124
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=5572,i,17421230270088047301,4774222076635671836,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=11628 /prefetch:1
      4⤵
      PID:3836
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=4012,i,13138999956406915659,848322890015994621,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:1
      4⤵
      PID:3944
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=10176,i,10124586109989376086,352975772778774020,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=11592 /prefetch:1
      4⤵
      PID:2728
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=12352,i,17726897681532367785,3774739039393816538,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8716 /prefetch:1
      4⤵
      PID:6508
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=9732,i,15088218685988241521,5309462217838528593,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10968 /prefetch:1
      4⤵
      PID:6496
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=1280,i,11590941215970629105,14249580687307856218,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10948 /prefetch:1
      4⤵
      PID:6524
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=8964,i,12802665999803729983,12183776481360996969,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9696 /prefetch:1
      4⤵
      PID:6612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=8924,i,2304645540924766997,7678247314400972544,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8912 /prefetch:1
      4⤵
      PID:8172
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=4608,i,10576274129519216842,11168044303301720854,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12236 /prefetch:1
      4⤵
      PID:3296
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=7848,i,15380848780212715798,16128865784648697690,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12864 /prefetch:1
      4⤵
      PID:1388
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=4304,i,6331628745141292321,7404929029830874543,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12924 /prefetch:1
      4⤵
      PID:2548
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=11820,i,11905080355287322759,2492565123150150785,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12884 /prefetch:1
      4⤵
      PID:1544
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=10436,i,5102734636042142030,11584269286215073310,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9916 /prefetch:1
      4⤵
      PID:6516
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=11840,i,10568413831138061992,15475572262864812998,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12904 /prefetch:1
      4⤵
      PID:2692
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=10900,i,13001716038314244578,17176770514688649850,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12964 /prefetch:1
      4⤵
      PID:4660
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=10952,i,18095889333332668952,6917975708363700170,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12984 /prefetch:1
      4⤵
      PID:6532
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=4548,i,482893674007628025,13133475365336154067,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12944 /prefetch:1
      4⤵
      PID:5392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=12524,i,6060080576283737648,11027142443190070947,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=11856 /prefetch:1
      4⤵
      PID:1264
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=8944,i,10533140067300881018,16990163813942979132,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:1
      4⤵
      PID:8932
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=15932,i,11355847203268533716,10500031917702285264,524288 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12924 /prefetch:14
      4⤵
      PID:8940
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=7192,i,12061856259800075978,11625412552806345563,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8892 /prefetch:1
      4⤵
      PID:8928
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=16164,i,15747207499638703291,7022083565121996723,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8720 /prefetch:1
      4⤵
      PID:6216
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=6428,i,6066741956721346622,8853940288211851868,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:1
      4⤵
      PID:6648
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=9824,i,11644883109110834857,98016258102895815,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8640 /prefetch:1
      4⤵
      PID:8244
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=9712,i,8946128937291010138,16320080004662186574,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=13148 /prefetch:1
      4⤵
      PID:8252
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=16276,i,2670086508069872044,6280485307231509709,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12504 /prefetch:1
      4⤵
      PID:4812
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=7904,i,10653165899291782387,4542297791513718930,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:1
      4⤵
      PID:8492
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=7876,i,9346770428163949013,13373565140870039160,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=14600 /prefetch:1
      4⤵
      PID:8484
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=7952,i,5600596859487257403,18197475808713054259,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8484 /prefetch:1
      4⤵
      PID:4664
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=8724,i,4039440422663194634,12291277080539902618,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10964 /prefetch:1
      4⤵
      PID:8384
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=12952,i,14451657784575936417,8348455328191420402,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8636 /prefetch:1
      4⤵
      PID:1296
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=16788,i,15945697683339933516,11898782482851565339,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:1
      4⤵
      PID:6620
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=16672,i,4491562540438901340,3459504310676207027,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:1
      4⤵
      PID:6504
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=14936,i,17058216594590637203,8100854200615478926,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9936 /prefetch:1
      4⤵
      PID:8652
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=10732,i,4816965055611067307,17823830691694878737,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=11604 /prefetch:1
      4⤵
      PID:8736
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=7956,i,5654166962891818917,3664526962955820899,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12192 /prefetch:1
      4⤵
      PID:8852
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=7304,i,13685937913490236853,5098852194342717547,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8392 /prefetch:1
      4⤵
      PID:8856
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=9828,i,3843668213401512958,6889769604751960459,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9396 /prefetch:1
      4⤵
      PID:8896
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=13344,i,13666571681617137364,2525313739968711612,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9464 /prefetch:1
      4⤵
      PID:2548
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=8592,i,14180642535347275178,16809586061840068768,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7000 /prefetch:1
      4⤵
      PID:8684
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=13316,i,7703426115409116261,14919498582173573849,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=7040 /prefetch:1
      4⤵
      PID:8968
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=11672,i,14842955475637690625,17257305052423083068,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8112 /prefetch:1
      4⤵
      PID:8980
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=11644,i,476633199678091494,11047408823166531200,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8168 /prefetch:1
      4⤵
      PID:8916
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=8992,i,7206311124497477980,2009083211754184309,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9460 /prefetch:1
      4⤵
      PID:5156
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=10804,i,3496622485386453827,1245804448648824149,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12272 /prefetch:1
      4⤵
      PID:8872
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=9332,i,6507071662300591876,14701951919800835678,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:1
      4⤵
      PID:8892
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=9308,i,12146227666581576307,10430010300528995583,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=14456 /prefetch:1
      4⤵
      PID:5568
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=7868,i,1278688353676462643,9699517745848676263,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:1
      4⤵
      PID:7760
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=11688,i,18098495973789481036,5310157269052583881,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9380 /prefetch:1
      4⤵
      PID:8912
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=13360,i,14140276645617678259,4851394136629666366,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9336 /prefetch:1
      4⤵
      PID:8948
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=7548,i,554803746317946331,9333793243545741463,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9420 /prefetch:1
      4⤵
      PID:7228
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=9904,i,3234694178889992184,7510759386349008333,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9480 /prefetch:1
      4⤵
      PID:4392
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=8300,i,10456344211449085172,5817119369069376413,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=6804 /prefetch:1
      4⤵
      PID:7748
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=7152,i,6796695347660657728,7590739963174732646,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=14444 /prefetch:1
      4⤵
      PID:8972
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=12588,i,16094489512525574354,16928231520508630854,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=9256 /prefetch:1
      4⤵
      PID:9004
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=14388,i,7833710609409937004,13365116009204038491,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8700 /prefetch:1
      4⤵
      PID:4960
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=12456,i,9477734500777035891,222674901550018930,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=14524 /prefetch:1
      4⤵
      PID:7380
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --always-read-main-dll --metrics-shmem-handle=11832,i,14935585498411172849,18227330999433399307,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=10980 /prefetch:1
      4⤵
      PID:7376
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --metrics-shmem-handle=11700,i,14617761761483125914,4960054182491728138,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=14360 /prefetch:1
      4⤵
      PID:1868
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=8172,i,2648099493042362548,7865402215240474328,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=15148 /prefetch:1
      4⤵
      PID:6612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=4592,i,3681256858735418498,8491040464589876987,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=15124 /prefetch:1
      4⤵
      PID:2248
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --always-read-main-dll --metrics-shmem-handle=8084,i,6482514724227342760,1574067641404915359,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=8176 /prefetch:1
      4⤵
      PID:1968
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --always-read-main-dll --metrics-shmem-handle=7836,i,10715797504749231712,7281195261069530249,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12652 /prefetch:1
      4⤵
      PID:8576
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --always-read-main-dll --metrics-shmem-handle=15644,i,8542187131581875760,1356889050027996691,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18708 /prefetch:1
      4⤵
      PID:4820
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --always-read-main-dll --metrics-shmem-handle=10316,i,10461023296661574132,6776068004296167291,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18712 /prefetch:1
      4⤵
      PID:8556
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --always-read-main-dll --metrics-shmem-handle=10168,i,10303239956720326291,17454157320644337993,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18724 /prefetch:1
      4⤵
      PID:6344
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --always-read-main-dll --metrics-shmem-handle=10668,i,7566642158109132552,2064772234578942042,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18736 /prefetch:1
      4⤵
      PID:8632
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --always-read-main-dll --metrics-shmem-handle=5920,i,1870596011771908519,9520624632183649910,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18692 /prefetch:1
      4⤵
      PID:8612
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --always-read-main-dll --metrics-shmem-handle=13492,i,12771959982101616511,15174522253013359106,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=12284 /prefetch:1
      4⤵
      PID:8580
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --always-read-main-dll --metrics-shmem-handle=13264,i,7863702998875421842,2871863080105871388,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18764 /prefetch:1
      4⤵
      PID:8584
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --always-read-main-dll --metrics-shmem-handle=13252,i,8746042717935950056,5718716322641440284,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18800 /prefetch:1
      4⤵
      PID:8348
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --always-read-main-dll --metrics-shmem-handle=6348,i,12632891087574191615,17417814067249994437,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18836 /prefetch:1
      4⤵
      PID:508
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --always-read-main-dll --metrics-shmem-handle=6352,i,2188602871334248657,1959543747338534692,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18856 /prefetch:1
      4⤵
      PID:8636
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --always-read-main-dll --metrics-shmem-handle=6312,i,11454860768161682725,16828088339442614431,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18932 /prefetch:1
      4⤵
      PID:8768
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --always-read-main-dll --metrics-shmem-handle=15656,i,1065972851341112914,2439457129125006658,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18912 /prefetch:1
      4⤵
      PID:1336
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --always-read-main-dll --metrics-shmem-handle=6368,i,4080240958003302439,10383447511245766490,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18984 /prefetch:1
      4⤵
      PID:8744
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --always-read-main-dll --metrics-shmem-handle=6232,i,10086063508858763131,14368934747200346385,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19328 /prefetch:1
      4⤵
      PID:8108
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --always-read-main-dll --metrics-shmem-handle=6328,i,11709016948716256998,1606356131380266014,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19044 /prefetch:1
      4⤵
      PID:5316
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --always-read-main-dll --metrics-shmem-handle=15692,i,15471971336409384925,7028488999631260591,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19348 /prefetch:1
      4⤵
      PID:8800
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --always-read-main-dll --metrics-shmem-handle=8332,i,9797618215079181188,9254464251652943057,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19160 /prefetch:1
      4⤵
      PID:8904
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=13396,i,1375731529580376055,4317051922130331555,262144 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19296 /prefetch:10
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:4316
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --always-read-main-dll --metrics-shmem-handle=15684,i,8372433846511413538,18317789590148282706,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19344 /prefetch:1
      4⤵
      PID:1304
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --always-read-main-dll --metrics-shmem-handle=7384,i,1022566197547564513,6360730742166106760,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19084 /prefetch:1
      4⤵
      PID:5208
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=164 --always-read-main-dll --metrics-shmem-handle=13548,i,328553647740969032,3216313584976557005,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19024 /prefetch:1
      4⤵
      PID:8160
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --always-read-main-dll --metrics-shmem-handle=13196,i,1073474821521050307,15492550924832584495,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19004 /prefetch:1
      4⤵
      PID:6552
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --always-read-main-dll --metrics-shmem-handle=8216,i,7859073980579065621,9758936113484073828,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19104 /prefetch:1
      4⤵
      PID:6172
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --always-read-main-dll --metrics-shmem-handle=15704,i,2656481794652784229,15175959671167555278,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=18876 /prefetch:1
      4⤵
      PID:7020
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --always-read-main-dll --metrics-shmem-handle=9004,i,11587746357611936391,8092995571340251268,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19140 /prefetch:1
      4⤵
      PID:5356
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --always-read-main-dll --metrics-shmem-handle=15680,i,8178927395508513969,15472529550213453985,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19064 /prefetch:1
      4⤵
      PID:7024
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --always-read-main-dll --metrics-shmem-handle=5616,i,4686158207950490035,13381420600885490129,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19340 /prefetch:1
      4⤵
      PID:1144
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --always-read-main-dll --metrics-shmem-handle=8984,i,2116564520013921839,2724232861372876683,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19280 /prefetch:1
      4⤵
      PID:5600
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=177 --always-read-main-dll --metrics-shmem-handle=6380,i,1880944829813845791,3401140546621112011,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19664 /prefetch:1
      4⤵
      PID:3368
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=180 --always-read-main-dll --metrics-shmem-handle=13456,i,1462527080572489914,7593976417199273593,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19764 /prefetch:1
      4⤵
      PID:3316
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=178 --always-read-main-dll --metrics-shmem-handle=13516,i,2265144125035027904,5468091134620151898,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19716 /prefetch:1
      4⤵
      PID:6268
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=179 --always-read-main-dll --metrics-shmem-handle=6384,i,11438887584623014913,8735112660848762601,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19712 /prefetch:1
      4⤵
      PID:2424
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=181 --always-read-main-dll --metrics-shmem-handle=13460,i,960799352161368062,10402032838618943259,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19668 /prefetch:1
      4⤵
      PID:6984
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=188 --always-read-main-dll --metrics-shmem-handle=7892,i,6933603579647756574,1669469338150192180,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19860 /prefetch:1
      4⤵
      PID:2004
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=186 --always-read-main-dll --metrics-shmem-handle=14748,i,3595944100627959854,2209103200344036917,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19880 /prefetch:1
      4⤵
      PID:7988
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=182 --always-read-main-dll --metrics-shmem-handle=1272,i,5281815305037769596,4808794791973192471,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19680 /prefetch:1
      4⤵
      PID:2172
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=183 --always-read-main-dll --metrics-shmem-handle=13408,i,7694027971999454195,3814499884370246239,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19848 /prefetch:1
      4⤵
      PID:6964
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=187 --always-read-main-dll --metrics-shmem-handle=14744,i,7510345116826663079,13998165040096357770,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19892 /prefetch:1
      4⤵
      PID:6040
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=185 --always-read-main-dll --metrics-shmem-handle=14800,i,6176785792014561206,13982921107177331748,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19876 /prefetch:1
      4⤵
      PID:6092
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=184 --always-read-main-dll --metrics-shmem-handle=9204,i,6537189985820301401,1941000875187729332,2097152 --field-trial-handle=2440,i,16457660410279866537,16226536658975188435,262144 --variations-seed-version --mojo-platform-channel-handle=19752 /prefetch:1
      4⤵
      PID:7404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:5320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:4428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:2716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:4584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:3740
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:4584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:2336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:2684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:9192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:4592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:9112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:5704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:2492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:4412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:3264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:5092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:3508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:4224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:8168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:9032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:5376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:1424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:3208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:6704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:2912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:7144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:10856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:10876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:9748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:9248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:11028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/watch?v=dQw4w9WgXcQ
    3⤵
    PID:5180

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2644

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6628

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:6616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
MD5 b9f45a900b1f64efbf90731f41c6ad44
SHA1 0c28e85e464e328fbbc07373b05113d39f83bdcc
SHA512 132313545c55ea809da0e811d6d5d324ecf5b6cfaefadb3fa4a29df5e6266dfeca7cffa4daf21754b4b37771504d3692189b5660a468784b5eaf80bf92f59ae0
TLSH
T11ED02BA033044C0CCE40203215B9A210720484204849031A8E41F02C8C6FD4387161F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
MD5 a044f6413820c4c3fbd300ee9b379ebc
SHA1 94fc91536a25274f06d3a6e89322dec7fde7912e
SHA512 ced4374c54d7b4ea2b76afe4ca5d8841dfb55d8cb5db96de4ed49e64bd3850a817db5301787c268756641c94c0bf85eb4ee188f04fc891fa2e45ad48284985a5
TLSH
T13AD02BA433044D0CCE40203215B8A210720484209C49031A8D41B01C8C6FD4387171FB
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0de239febf966dd2724786eb068acb9b0dbb389caf4a4998a635b54a9f1dc392
MD5 6af97b4427b8f3c52d83ebb7c288ceb1
SHA1 cbd0476f37411c4160a58df785132ad9df3804f1
SHA512 9b93410315c14c97fec5f1764328a7191843236b3bf17a1818d570d96ec39004bd13fbba285aea007364986df6dad711e11eb0dad4090d3597ab73cdbbfb322e
TLSH
T1D7E07DC414C8C2BFA3407647826CDB0C83D13E4AD2E8AE6A370989AA72012C0B3F7691
MD5 SHA1 SHA512 TLSH

Submit Download

f_000050

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
Size 56KB
SHA256 3f9b0c0a209ecaa2f816817bd374578d8ca9acbd0b1de8a110dfddf3c81435a5
MD5 74c2ec4bb46698ce9fddc0e5b0cbfcf9
SHA1 9692779807193c6df10eeb1151f533c670455f36
SHA512 a442dbbac7d346af3e65f78b11802953c38c63b2fbff4c413ac530d2972a1083218b115cc2a471ea5341730d09afc9da395deec45f97a989c8097c0382979a39
SSDEEP 1536:sgBxpaRRlGtjocgEAuoJl4/I4s3yvxs6Kk7C1UveOJ:saapGXADl8LdJake1UvH
TLSH
T11743F17BBE71F6DDE24201C25D132D6407129500B521A9C0EADAD7BE1B2D13377EA727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
Size 20KB
SHA256 2fc77b4a0620f5dca2d3cae6d917af3acdeb3b2e5558ba1727f8d651351fc692
MD5 4c322ac3533ac9b7077632040490c691
SHA1 24ca0ed0e641e75cbff9ef84a93bca9116ad2249
SHA512 78543d32bb0fa6cabd9b0497256b73f68076ffcfde470746a500c7c5ddf9af9446ca247e9fdee4b2a4f915da36c49679bee827852411ebb16512685b3a710963
SSDEEP 384:hbq1xpEkBqusIx8/AlCRykiyVxg+6YFgJ912gX0u2iP1H6+7xeHUAui41jH:tqPe3hIx86nkiyV8Y6J9H6iBbiUc41b
TLSH
T1B392C08BE5E2A3560F0AF01CF78E75232AC9A6EE3171C3FAACE14D6519781F51D106A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000052

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
Size 281KB
SHA256 1755267059a5656099749ecdb758249d3aa82ff772a2eee7984c8f790e486ea0
MD5 6807e3441cb5ab16ced05f3738a534c4
SHA1 a0f8a063d00b4a1d30b5054e101058bf01cc88e1
SHA512 bcc5db387956b9226e9db584891ef3c7d441830c5a3a54f18813d4d42e5d4967999d875ce1c02a0243edebd51ad67b863f6b2d2b57332e9e03d52528902779b4
SSDEEP 6144:RtSC3aVViRJE96XUKqdBrgebFw6tB6VZW5varQA6zEahv8:Lr3aVVGJE9J6+u8k45SkpA8v8
TLSH
T168542315BE344392F9A007C6BCE6CB4689B796003EB175874EEDAD62FE51C8D94E03C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
Size 20KB
SHA256 652c695904bc7f0427931acd1988b101a27a14abebea2ad7b57c2fd725529435
MD5 22929c3aa6317203705c12f30d4fc0c8
SHA1 69997309d8f96560b6de50883a02fef551e413f7
SHA512 d2df1e2f8e0ff994f4a47e27585289edd531d66498cd72b85793a63b66291244aa687713f1bb062721f9350d20120afcec5da536cf0c6278ce930c7079523e5a
SSDEEP 384:ZosNmz8MkZcW4E590LG0jJjk/U0sVfra1yEdq997Hvj:Zo+mYMFELjCJjTZrandQ9v
TLSH
T134A2E1E8945EAAFBC28AF4433C5B691588E5C9F01D37097BC9EB34485CEC691B29850E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
Size 672KB
SHA256 0b0cc790f712a74632bb3485668034254a40ebc98fcc334d01cc5772a3c14591
MD5 35bac375805c14d19f4fd4242a868688
SHA1 bcc08ed253eac01b777c6fabe842574f462c715b
SHA512 1f31df720badf527ff143c9f0459b92bacd63c2435f5a3e8e09d3c2ece882d7976cbd070bce66ae184790ab151754ff8f12ddb60cbf4efe92e56bbec25f16cbe
SSDEEP 12288:frtpJ86M9kGk6+AcPdC7Fpikrb14LndbV+VOKh6hNxQgXKNSdYyV:ztp66M9Zk5AcPdC7FpvB4LndJgOHhNxZ
TLSH
T1A7E423CCBC919626071CC31743FE6671FB4C31436FAE63B7168C4A40EFA8664D96AB14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
Size 2.0MB
SHA256 2991ed6dff05f1f4b0ceb60ce29954a8030eb14bbe75540b18057ae40ed86ae6
MD5 7aee0a554bf10400dd75bd60d13eb573
SHA1 aead02fc7e371221bd586d7fb8ba63835f14203d
SHA512 59f10280109beaf79d1fb5ec20d3a0c1f10bd6d32c483608e27ef59f61968d7e08e8282f29598b517780337cb4d289444cd4e5560d5b6b27683d364247877ffd
SSDEEP 49152:80htDBoUaplXyfGzn7+MWmllNzEG6JJ0jAuiZoGA3E:8EVOtX5HBW0lNzEBJ0viZoF0
TLSH
T156A533997677F221E38C5F706575AA1A090671B817207E38F38C049EF622FF9DA6409F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000057

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
Size 22KB
SHA256 78ca561cc14f6f651202f4b0a0764fcf98693e1cea6a6dee7506dc99eb81ac8a
MD5 84da577c3b947b204b89bfbd035eb2e3
SHA1 7e8d186e2fceced4a5818d197c4beeb899f027fa
SHA512 43eb157b9d3573da2e9c8aa72a068308dd6cce83fa8fd346d3a80f417b7483223341465b08e9fc464dab0e7cc0b0f720da5d2c76c84c675fa4dde0c066fe4d69
SSDEEP 384:aMljKvSwWlh8TaWy4MUmVZLNVFqNd2TjkT8ubFsF9L36xoledOKKKR:akjKvSVn/W/MUALppjk4uu9D6xdOK9R
TLSH
T178B2E0831225B60DFBE94EF6544D9539D5FA2D9983AB2C780D0BE81F881956FE21F20C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
Size 34KB
SHA256 8816f8a096e4527805663cad7fab90a45bad77931a54700a9f4f71dbbdff03fc
MD5 e24b926969c62cb0c7830c66d78baf32
SHA1 c110602ae9b8037c878e05c81f970b0e1c414fd7
SHA512 e91dc2f53be5611f7524ea734c2fb626daff53479a63599eff4c4756cf92485a48c6dd266517bffaf4656a077a6cf1d5c9360d6a365364042a9495f14c9c931c
SSDEEP 768:3sluZa4yQe5Vk07QlJZ57MZGx20uimUgyIuOV7V3HEB9AsAeuX3BY8XFdr:8loLcVglJYGE0uneIpH4AzVF1
TLSH
T1F4F2F12BC60A17954731CDBAB8B56F44A4EF0FF160D11302A1AC8E88CB5C757624577A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000059

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
Size 18KB
SHA256 5de83d4fdb2d9cde77ec381a16a0939acc9f25c909b25fe9c0c020dba61349c0
MD5 feadeae934f5373c3c889ceba9a622d6
SHA1 648751a8924683d938211cabc555a097c7158462
SHA512 c341acf6f8e04ec38579539a81da328077c2d80610321f38f91f0e0be5186780a53840db603a599bb0d0752de984cbbbee532cd658a1c1c15d211d8c56f06749
SSDEEP 384:gAsUfW+rAjRVQ7xnebbciJqNRN6yLXptq1COPCNxmMNKm1WzzNNb:VRZrAjTJ0cyLJOsKm1WVNb
TLSH
T1BB82E11A965826814106D33CA3E5F7E8A4AF9CCA6C87107CBEF58F625E75041B2109FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
Size 22KB
SHA256 f301632c883f1cd94ebe6253f5ac4ef8a23e385e57e1df63112f9ef56988d39f
MD5 7c9ab219c63152e0c1ae881294eea38d
SHA1 28cb2f17ccfb8dbff24cc402796df7d963d96ac9
SHA512 d6759c0934e6b72ff69360b64807024fb7a15723a1553c59ed4039cc8c446e11ff0d4ac1b100fb386da4f37beee02a7c5d5e476e98f1afd5a3f4aceff2fe8eb4
SSDEEP 384:ZZMSWizDPnzAaRu6GBL35zlSfpwEwGDFhCAKbEansvL3425Ho/TNc:VLXPzluBLvm7LDyKq+34DTNc
TLSH
T1F7A2D135EA3BC3EC60C0B510047D6B07E7A4E87855FF97C5E587C56DB12332A286C5A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
Size 27KB
SHA256 15e68d2a9d25570ba52b91a5abf7fe8edf6ffc41f331761061b1709c61c57226
MD5 28ef1c41a735dd87a0d53be26ac32a53
SHA1 2e1da0a28e93b1e9cd3563f662534322f603a851
SHA512 9f105a020350c16062f1495a17068b0e211da81cc588b3e51a7955f458a34031d5709ba139121e5e187fabe1d6acb45bf3a4a14a4199f6e4d940da1b2aa4c7ec
SSDEEP 768:n1k/YJY2K74Gi1pXjRud8n31zmEd9WBokAsRtUnZS4KS:n1w1b0Je8n316EdCAsRtGS8
TLSH
T1FED2F194B53F77EF1BD030C4C9499644ABE0DE8315398EF2BDA644744CAED98B180E70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
Size 47KB
SHA256 cbab93ea618b5e9c219533e4cdff779d13ff2056f2bfe85126e992235b8e8cab
MD5 8b7136b396bd0e3eec1762010b5f405c
SHA1 63a5d67a8589ba0457c25d97a1b064313b6d6481
SHA512 31e272bb7994b2e08a637c52266de03ad8f74f8a4189de0f3a149d4710f01fc17ba7e66d9d79c29d226d1b6f3780490ceea2f83805fb0c2ca1972be739c450c9
SSDEEP 768:PswJOi7G53kOmhZWZISiE9+cPZFNYonT7YPHzl31sFhT5TTYkZ3Ghxnt8A3YkDLZ:PswsyG5UZqoELxznTEPJ1sFDTDWhxqAt
TLSH
T12223D07B1F79EEDFDE4D0B39D9039A26F7EEA1343CABE11546431404486F2B1AC24662
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
Size 35KB
SHA256 e14937fa2e3eef4f8957fe4320b4be3d5bc9546302d8edbe514f68b9974f1d0d
MD5 363965865bff355608420d5299e81fd5
SHA1 1c68a59de248b94716583a9a8a02f71a3f4464b2
SHA512 d660bb384b5532810b98a6bcfbb78d8d5c9d34ed2229ac6ba1dac61dcd85d05e161203877a09bd6db63fe6f83e9894f11a94a3e8683963cac4bba8fbd3d5350e
SSDEEP 768:R+YJeVfBbgmdsMA3nAlHzQjUBfGYziLQ8g1Y7vGX3W/IFUSRDOsRHdg:RZJM0JMBgoGi167OnQSzRHG
TLSH
T1C1F2F15FE0682232DB62F652FB0264D4D79F15EF176713B5700811427EB97E0E81DE1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
Size 32KB
SHA256 3bb9f029deaa8fb042a0c9a67f347e5ca42d11a899d42663c4821e27f8b2c6ce
MD5 1b1f1ca2fadffeda448f4f96c05bf50b
SHA1 7adf3d994c967cc6e6a006b1db8ca5f35066036a
SHA512 2351fe6f19cebb8430ae35b9468c5ff23d0e0939ba9caf1ba440c9850937072567b01a70f5445591d0f10a40355812c528a580eed7f4773bd29d1a5bbc86bd4d
SSDEEP 768:jhIdTLaXmhksmosp3HoHU/5Ll/3lMDB4XowpYOy9Bw6MzN7x4bVIFm:9Idna2hkHxOUBhto6XowpYOyvrMf4bVd
TLSH
T1D7E2F1083426B55BE6402D7826EF05B0A5219772EA8E8BDF487FCC2B81530BC6D58F9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
Size 46KB
SHA256 6deaf60bcf82cfcd2597883608e543780d45e000cef16e4d5fa04214e7a17c78
MD5 ab0bfb64de3f8607fe8ff70c108d326c
SHA1 05a5db0c6631bbc5577496396d620a2bb1b3e5d0
SHA512 a31d193a231e60009d7c2703f485e2a4fccd28d2687acbddb55f7e22e0caa1455859473c50c0bafde2dfb33355a800c47faf59de506ed4d5f81ff5d2cf039c3f
SSDEEP 768:tgdipdc4W658mR4r1+CKxlIxodm6yGS0z+RfTG1u3GvfhvfYNDzssTEQJZGUKoVx:tgAd358mR4p+CsCoABgefa1u3upvfYDL
TLSH
T10C23012B79F0012963FA642162F35A578488EAFC1F0408F97EDC5AF13B28145D9DD876
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 23KB
SHA256 1a4ef0d7b68dc2895ece75e2c8644ff40b0fec022def3737fc24965571c64f1e
MD5 46f822124247c3f626793134083c8595
SHA1 544b8bd619815bdda35e850e3ba81aff1407e7bd
SHA512 30410792c6b530824e2dda87728dff12179cb0c11b92ce92902efbaf8ffd361ed68c73709a7d3c452298c2383c343e2771b1e39de7e53fb2588acb56ed670b24
SSDEEP 384:7XWwgDdqG1/+e+Xo8ibfGiomrkMVGY2hIfWclCik4bRjTz7+/XkoRUHWSsydLgxv:CwgDEG1/+bPIV8IfWcCibZT4XkZHyy9E
TLSH
T19EB2E1A3748DEB1525FC33C65E2F67E35C1541CFAA945643EC386B28954081B231AEEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 52KB
SHA256 a299c0090ed56192510c9117e26a98bcc3fde73ea261749eeda292571c5f9539
MD5 34505c7afd6075c578ea75e07158214e
SHA1 8c87e855e5b14654599ccb23b0c3cf28adb7919a
SHA512 488a9c8973d7c96beaf17a2bd4739675e007890a038ff0e2c0e5d195aa6e219dad5d49a2dc08067ae81e24c5a56e0ea87fb61a929716e492c3a8c58e9c7fdd79
SSDEEP 1536:cb6DlZcWWeTjFKiL0SGU7Fhul583UF7EF1jHOJ+r5ntovqZClo:ysc14jFKiLGUq383UFQF1jHOJWVqo
TLSH
T19A3302380549DB1FC33764A2FC9EDEF07DC01510D9789A5043EA37F2A2A985926D7AB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 20KB
SHA256 2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed
MD5 8feefe1e602c4b14ff414a77c3af2c2c
SHA1 e57daae78e76c8944e97edecfa656f8608e09db5
SHA512 893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92
SSDEEP 384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR
TLSH
T18792E056B288746A77E4E3ECC859AE6C65ED9B0F0C1B15B909322122F196C4734930F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 20KB
SHA256 fe40b0d1fa5a83a873de6071e8ce2e50bf0af0a4f69351a8816ae07c8b63f5eb
MD5 72b38471d7c79d0580aafb083c847f55
SHA1 966b20123a180e61bc44535a9f9dede31bb8e492
SHA512 f3c1abb65b4044d1f6b5dac84a33ab551854bfac350695039f7817414f8352bd04fea1ebc15a267586457ca047aa9539deefe62da5edceb08a62ad51a6911171
SSDEEP 384:M7iSA0TJ60EN/tbXiO/UhbM6fPL4D/rdu2FtVfPHSy9LG/x5k1kIM9V8KB:M7fVTJ6dFb/cHLGTVXjLG5k1kP9V8KB
TLSH
T1D392E12C02F691B5CC7C6BB22FDD0B159C158B11A2E174CB2D0DC5C5180E4A17F22F69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 17KB
SHA256 e83d8b0a52db0bc3457ec3470d583122cdd8480f7a727a038e8930764b96cfa9
MD5 3a5bee5f1de500c38b11255cbbaea782
SHA1 d4022978ff21e99f8f4327b48c84265d104cfae8
SHA512 ac33b282fb536e429f0fef9432beac91cb04aeecf0e473e251bb473f12b6d056db08dba82d598b1601df448e3c7bacedd5638c1b4980b807812759ca39de54c0
SSDEEP 384:vwOmLnUAPibvsTJ6xx9BdOUPwCramCxyFdpczZgJX0KGTJ/X:VmLRPoGJ6n9BdVPPraFZ03GTJ/
TLSH
T17082D1D6A3C21831EF84F0389E49AE86515AF61859CA70DDFA44DCE25CCB473DD436E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 31KB
SHA256 9cc1a70e9272a9bbecfbd23237be267dacb4044ffe12b0bf4372b8b6a9104994
MD5 aeb1a662d760ad6b94027c2743ab8347
SHA1 f70a1d9de7e8a32ec0ed72e261725183ccaa3056
SHA512 583941acb00399f55e54dab9999c9a96715c39b798a891d87fa210d085d22630feb418666dcb6228195b8e31458dd20f9b8cc9e49893ef2bfa37e23918c3fe2e
SSDEEP 768:qBBK2xckdDxKpd0kT4B/mLahuH/j8S13U1557VU:Yg4ckdxKs5/EahSkz57VU
TLSH
T168E2F1E558028D04ED5BCF8712AAC23BBB45BBC75C43D0520AD55173E36CAA6B571825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 22KB
SHA256 1a6908d3490e016c1b69816319a0618e16f1193a09da6bbbe8e61e642edd0ed8
MD5 a904854d52e612b29623018ecae77e1b
SHA1 8c3a592b1cef096a80187e1dbaa95c663bb77a22
SHA512 7569a2bdf7873fdd9a636e3ca19565c270a07844e667c61040d43071aceafcd0b9deb5cd203acd08b65accbda44235436f0528fe7ff62316a98b538e879688e9
SSDEEP 384:kYNg7Z3+PVaBW4rV4OtVIMCx17fHVJlf1pGB7bsF9hTCpfcoT9CDMCDZd3vhk5vx:kYyJ+P8nrHt+Nx1f1LfeHw9hTCpfCBFs
TLSH
T186A2E0B8BA4AF3EFEFB6DFF845086740A17D797C835152A13A71526C8199783989200F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0ba318c35c0ea617_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0ba318c35c0ea617_0
Size 279B
SHA256 212e7cf70bb25242f7673fb236579bb606c4da400f41f650833d4a5d6e370ad9
MD5 dc597a399697a1b4b1f785dbe55452db
SHA1 7829e1d2077443c0501074a756afbd4f6f74c030
SHA512 3e968b497a971cd836fedd9c0c110e3e079d1929d6366c541a595a067ba608e7155f5be602c142ea49206d84cd4d99ae8eaa02e9ef0e384bc269efa7ff2e671f
TLSH
T19BD02B63A8126800DA2EFCF19A11204E67E340448580A6D99419F5DB6559DBA704A061
MD5 SHA1 SHA512 TLSH

Submit Download

10aab25135d21943_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\10aab25135d21943_0
Size 298B
SHA256 a739e68e9e0b0381136587ae0f1f6ac3efb02be0fe72f6d091abc0b0e6cde3ff
MD5 24a6aa6e3762ddcda746d77952234e7e
SHA1 6371ff4a4353aa86526eca1357a1df6256c7972e
SHA512 37b4dc1562d9e92fdd57e9e7a024388c333eccc5d8478f4cb553ab7f07172f2aa8734ba5072529295c93d273d6557415b7b9d3928bc9a7f5c2e80656c1c15430
TLSH
T13DE027F3D4118500C7194FF1D777799BC34941CC5CCC40A51486E1A333895706545491
MD5 SHA1 SHA512 TLSH

Submit Download

13c68d9a990bc70c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\13c68d9a990bc70c_0
Size 434B
SHA256 c4ef67f75708f27241cf3e96f535372d0646d78b330048fab50bc6cecb5012ff
MD5 30c586d1516ea42ab592652b9d76c0c9
SHA1 cd2a7f3975321e666b9ebf65ab9f2eb5c6a105df
SHA512 c4cd2d8c58763617c9a00e505f8731615c5d17e26a7d7f7283a3437034656c4240cebefa3f3356c44e0d97a182cdb694d1932d5650862467d70ddc8dc4ef326f
TLSH
T1C6E023B70C447CD1C924B9FC6B4D270E7A5781DD538AC8B1414C90731C1A4345381800
MD5 SHA1 SHA512 TLSH

Submit Download

13c68d9a990bc70c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\13c68d9a990bc70c_0
Size 434B
SHA256 f1955685e5f7b7d3b63bc842149d404d34427f8a74205fdb3050ad776a6430e4
MD5 b4d14e1ab181f7ac3a0ef32dfe65520b
SHA1 b3ae51820cc632f65ca5c94677cab37b640da640
SHA512 d87b91b49636a76c4fe344a49be754689812f2aa2fcf238c9f4067d09b6aa304e3b892d3387eafde7d0fbe0d9cfc9303d03cd2bf5ab9667167bcbb3eb2a3a0e7
TLSH
T18CE0A37208646CC2D926BDFD6B5D270E7A47839D9B9F8C724148546318571302753845
MD5 SHA1 SHA512 TLSH

Submit Download

19070a0c8b68828b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\19070a0c8b68828b_0
Size 62KB
SHA256 0200a9ac65455c04b03381ff2fee15b0ace096034b9d3a83a803f05711ca2bb4
MD5 08d5389028f521831a7e01a2a97d00d1
SHA1 ae13d7286da61641f19f748d822f0319eef17453
SHA512 c8c969ad58a12b8c12d513852ef48101a55da2ef15e7567b7a9a4714b3e7dbba099cb52cf72f1a65793cd17f7f3b81aafe469c63aad905c614f286ebfa846192
SSDEEP 1536:/Wcw3cPpzlUowL2cm9ibFHDYzcmNGBfXoL:BFyoybFHDQ
TLSH
T1CF532CCF72D2A73599E269F6505F410A62BE90065C85182FBA10F6F42E70D4B903BF7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1c20125ec9e4bc60_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1c20125ec9e4bc60_0
Size 89KB
SHA256 a387d135f28b7bfd080a695c8c8a4e2ebf8424c7b9f36e2afaf8b1fe556f690f
MD5 e5819ab3505700e6687f68295894df21
SHA1 e94ad000482bf00f6347dd5bee63403b4a5763ac
SHA512 d710248e7605a2bcee093a592c4413ffd2387a4a60ef2fca74c64d49bb640b15196e5f9b1d584c3ef8c6eadea2235a0f525be425ad4843ca221e43b1c4ec7c1b
SSDEEP 1536:htunSA6H4UXn4xAHIsot/z7PewpQ3je9GQZB8JPF6UH3JKt/FKUA7//4eAtkfOff:anSAK4FxcWt/z7Q3je0QZB8JPF6UH3JJ
TLSH
T12793E8816389FE66CF27A3F9056389573235C04E3FCBA31762E0E7752C292E54E46D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1c582f3fbcad2092_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1c582f3fbcad2092_0
Size 125KB
SHA256 cd08b2d28744deb116c0b01bfca62c048fcd69b827362671e7499443caa0e88c
MD5 3d3cf438a8eb55112ad6deb52a9d62d9
SHA1 b3b44654fb07142dc1db3ee3f108d03f40a7837a
SHA512 333982a0d1068de6035206dc95db97c53d1df25bf1e97af263355f8bd373aa515d29df45b698bf9aad400a992e835cfd783067e6aa6e16f40f551537c9688649
SSDEEP 3072:ucpyMfSTMSKZsoB9R52a2lHFztZl9aCg67FyisX07bRLqCB7ElPvTtWjNpo7:ztawSQhAa2fztZl9an67FyisX07bRLqZ
TLSH
T1AFC39691A7C17F7DCA2677F807558F62F23640DC2B93A30321F193391C5A2D58E96E8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

20f189f644ae3386_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\20f189f644ae3386_0
Size 293B
SHA256 d0489f4ac1543aa923b84fe5b491ebc08e4064ffe4738388a7b8d057c3744464
MD5 e1e1d9304a6cb6eff59aff595ab3beb3
SHA1 d113723656c34aabf2b30a1817a4e366292ae52c
SHA512 ee84344456e795b778917774b4532abf4a6b2b42cf7846d57ad1969d387f33abf02b4da6d93b4d7a2c0bcbe68a92daf194b49d16a3a6223c1d8a94ddd92ce581
TLSH
T1A3E0C2576560D812FF2DA9F1E621218DD2E6A1AC588083F29004B1DA60D88B2546A222
MD5 SHA1 SHA512 TLSH

Submit Download

22f3724abe024fa4_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\22f3724abe024fa4_0
Size 1.7MB
SHA256 ce1bf4614589f1ccccb9207fe93cb541ee2619735ea7bed3d29189a6064d61b6
MD5 5e7f7996f611d4374787b70d6094a357
SHA1 fbbbb4950bf2bad0f62465fa365a7eaf52dd2887
SHA512 cacc22c26bc19ec09e19f8795b071a52e6318af76481531fa6968d14bb208634a480b643cfc31a202b2ec8ab2f416615b47852ca4033467ee23fc5099c9f458f
SSDEEP 24576:/DRE9gT8cpb6HgAQ7vAf3gM22Zeowrbw0u07+N:vTj6AAQbM2how
TLSH
T1A985628596C47BA9CBE663F907529EA3F331449E2FC6E34761E0DB282C8E1D40E54F49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29c9fe296e2c1edf_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\29c9fe296e2c1edf_0
Size 283B
SHA256 b03400eb7b30bd817f34585dbcd507dabad079fb6c5717ee4398a5c80cb64d46
MD5 decdd1baf0a8514d03775473f5b5625d
SHA1 aef1be08a82cc21849568d597e5efd38894a1eb5
SHA512 9660315c69994da5b907f5406524b7d43325bb6b767d7317cb436ef300829f7605f51bc2247736b1514fd4fa062a668ef3c1aa7215451f21df52c53af643cc7b
TLSH
T16BD02E0344202C4EDA5EDCF8EB6082CD2357802860C887BBD20CF6DB22E8AB209C171A
MD5 SHA1 SHA512 TLSH

Submit Download

335e69ddec2b9ac6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\335e69ddec2b9ac6_0
Size 6KB
SHA256 0d0883f48bf185f4eeb28a0cd787e2ac62992bb1f569116785ef9499432a4b44
MD5 60262ef1f4b476cf724cf2ad0503bb3a
SHA1 db4ab6bcef118502d51507472ea22a151fac539f
SHA512 623d597f7b4e0f9d51e354aed2dbab637e5ce2dfe6c6de349a1b43873dd01e47c007ffbb0f81051f485a2fa798aa8b1f89337f591d2baff7522a43c5372c6ce7
SSDEEP 96:S2AsW7+z7mwrwPks8g6LhTaf5u7RgUELSPC3p5A9YMdeyul3xhlsHedA6p:Usi+z79KNI7RgUv44Y3lBkGAq
TLSH
T1FCE1D71297A18956CE225BFE51928E21E37380183FC7C333A5A4F7765C597E24B8E44E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40b7354a52955712_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\40b7354a52955712_0
Size 9.3MB
SHA256 bbf1fa9b591cce85985a39a3a94c44058c92bfe4767d0874dc11496369bda417
MD5 77ed639b61a630f73468c365aa40578b
SHA1 a20d94ee6fc1f17c4b538e96b7749c4d81509d96
SHA512 1d5fdaaf9d88d3fbcb31a507ed4bc4165acc0d445c2bde2cc3ead71b07d6c61c6fb160331b5bc0548c1cce80901b3c0aca066b4d4a87c2083640d34aa87e72ca
SSDEEP 98304:vDv8eWS30ojOCuklcVMv4ApvMQilWupTtJnlRRVk:vDEeWS30ojOCuklcVMv7pEQikupDlR/
TLSH
T1BFA6E664AB81BE4AC9EB56F40343C85746390DB81F529393B4CAF7783F4E6D30E6584A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ac2dd7297571edb_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4ac2dd7297571edb_0
Size 261B
SHA256 55d934f150d020ee29342ea2693ed9205de609fe78eac8cf633cf2bc8f37eab4
MD5 57ab92269e8b33ffba9b6010958fe195
SHA1 6a8809ee55f4ea390b3d40228eefd5d6727691b6
SHA512 f33ccaf462bede474627aa9bd084533ee2733483a0b5559c7ce782f8359bc6a0e2767941d9f1cc5ef6b83aabd7215304c4175788a05816056306517d70061830
TLSH
T17AD097F384236CD1C13BCEF4DA3ABA41C30148A498DCA1F5900EDCEBD1112A3AB88126
MD5 SHA1 SHA512 TLSH

Submit Download

53740f1aa4a91137_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53740f1aa4a91137_0
Size 3KB
SHA256 0b183b86d741a4812ed985e670f6c06bf35eba4dd48318fccdf01acc26d820d2
MD5 64ac8975b77351e1206a56a5d6b27126
SHA1 902cc1fdeef942bddc224e0b91ad8b020587c8c8
SHA512 ea41b6a1665e1bf464e4f905b700b082a2c83e9587fd6fbc5a300b11a4a1d7182f64381663c2ffc7ac9a0fdead890ffe08bde68e1941ba7337e07d47d19b0aef
TLSH
T1C0610986AFA49655CE2157FC02A2D129B2B6C0096FC7A712634477A43C6A3F30AC4D0B
MD5 SHA1 SHA512 TLSH

Submit Download

55219aa2f5a92c60_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\55219aa2f5a92c60_0
Size 281B
SHA256 4913d58a96757fa09b9c28691d12c8ef9a624bf042bf97aa6fd6f26393b5df86
MD5 b414c28326a192a8ad2d78303d43705e
SHA1 4f82a600721297923f65f94e27211af53d556374
SHA512 75b3ebfa67ec6ca8042e88f6b7eba086d390d6ebff882cfeb1516367498f8fcb14b131916d1268a6b65e829955f8142ccd6db8dbe89d0a8f425e4f65d69cd098
TLSH
T12CD02BB74D84AC45C75F78F09F68604ED7A3803475A491EDC04961FA11AECD6C998420
MD5 SHA1 SHA512 TLSH

Submit Download

55fa218ef1ee7263_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\55fa218ef1ee7263_0
Size 257B
SHA256 c6f98094175d5a19e906b113641e7cb5a647b7221f9e0bff420f5b5efa2626ea
MD5 d3014c029f57a0095ce74cad979f0889
SHA1 d3c6ac79f763b248730297180bc563d993620d79
SHA512 8e811b9a34996ef7d7c2dcc29b9c4142f2d067284f46d0a932ccb2028d018b4a26ccee5f48908a95f92b707db09b305d859f06f637e92087c373a737b0b5defc
TLSH
T17FD097E396052000DBBEC4F4CE2C32AC8F078428CC8DC4308487A18312048702B8C752
MD5 SHA1 SHA512 TLSH

Submit Download

5f957dad2bca2cd6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f957dad2bca2cd6_0
Size 15KB
SHA256 c97ba208827563872319c1c8f7b320ba8c330decddad6f4f5b410d7aaa59e468
MD5 bb39cf9b26b621268837205252e6cfbb
SHA1 02bb5ea4e7672d37f2712f5545b50889d4726b05
SHA512 0c2e9513eeb7feb7b7327176a405fee28d469b6f0e298e1bfda177992b645eeca65f2c2182c13024d3fd0cd9a9cb56ffa6a2552df0434493a8fe48612b829fd1
SSDEEP 384:nJNi/k+9jBbDwS42V2l61eYicqj4xkZ4e2EOmd9hiXvPPvbgzpMd06LGS:nbSprM3j4xkb2I9hiXHPvbgzp7x
TLSH
T1EE7284C6A7619646CF6347FB4162C662B336818C3F93D32265E9B3342C153E39D9AC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

607d1cf1441b3385_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\607d1cf1441b3385_0
Size 26KB
SHA256 e5e923f6cf02cdd55919f40bb28766e3c8c785c5b397c2ac4a50ae5295db271e
MD5 43e3dfec6c71dbab1efc5a2d26212de8
SHA1 073d03be75a002a0f202e7504ff9190644b52eb4
SHA512 72a1a87ce68c69e1839a9eeefce636494994d63196a36fcd7733d7576958b898bd5ae00b3bd027be80cbf23395328050c7f560edb3583f9f27253ab390cad591
SSDEEP 768:G++DU6keyWDjL510Igg8vGVDE8SmUY9o:G1DxkeyWDjLUneFE8SmUY9
TLSH
T1E7C2A391A3907B3ECA2723FA85A2CDA77730C0997E83D38330E1A3B55C596E54D49F49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68663933c4178e2e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\68663933c4178e2e_0
Size 6KB
SHA256 631d7f7e5225432040d41c7777646c2cf95aa135dc4c7b2d1105e3e90f9eea24
MD5 3b0461105c35eefa0cf2af2123c8cd91
SHA1 aac8b806158036a7b37544f25c311241faeeab90
SHA512 dc60021922e478b4d33f2ffdb63cde67229694555db3f8a8137811f367901b6c46d6aaf3ccfc2cd84a9ecc25142042d3dbb37016d03273f4d9812e336a5662a8
SSDEEP 192:ztuAK37JNyKrvtSXIlXSDFR18cUW+/AmXeHKeoxENQeL:LgryGvtAIUFr8ZWuAnJoxaD
TLSH
T1F2C1B992F760B768CB0562FA85528A967331D05D3EC3D30BB0D0A7A82CDE1DE4C597DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7094be46a95bdbf0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7094be46a95bdbf0_0
Size 9KB
SHA256 5f015b2bfdd239ebabefe2ec0ea4cbf0417fabc6f3c4470d52f074c94d0c748f
MD5 dd21f8d41daa1770609f316718852416
SHA1 fc55d4451e49f4d7c467916a10aef22c585951f1
SHA512 ce9a56c1a21940e3b960105db2769a820ec17c72b151775f5916262e18383acf06f472f55c82c7d288b2ebe4cddfaac0abb30fa969bcf73ab405c8c6c1194cee
SSDEEP 192:fH4Iip4NBpzyrCFvUW8ZM92zgI6G0MHaeGmZErJHbp:wI9zyrChUW8Zp8I6GN6eG2ErJHb
TLSH
T1511240EA8A536AF3D4B44A7900C3D32EF62720D86ED65107872570A178037D558FDBB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

73b203d89441c2e7_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\73b203d89441c2e7_0
Size 282B
SHA256 66f781f9238b296f457b71191cc0af3c69bd0f49a3355b0720a9f55e97efa4b2
MD5 f63527303f94e791226d1df2d12197e5
SHA1 3d017d0045fe5b47f87f8307acf2392ea205c586
SHA512 47e3e4ab511edabf860e445dcba9c98d9db3bb9559b5c3622f055f14b37e053cc08653c0862de17caf39ce283f5e62ec014173e26ae59375e069bde4ebf83f63
TLSH
T1CFD02B4754543C50DF1D65FCAB3233B9A262D0C914A8E1FAD14520A636E09B654D1058
MD5 SHA1 SHA512 TLSH

Submit Download

917413cfbab3ba3e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\917413cfbab3ba3e_0
Size 45KB
SHA256 5f5e01779d810045567bca6a5eab78cb4e4fa7565811c0aafa2f253b213da7df
MD5 59d755e40882b8ea9ac577f02d14fc1d
SHA1 2241547bf4b019fde14936fb631287c1c4f4664f
SHA512 cc196afe02612402c611addbb1d318dc2daee11e7a0a05b3bbc62bd4afacc9d6273e1dcfe140ca03398bce0d7acab9131e982d1acde18720c2923bebac6a9237
SSDEEP 768:uScb6zOMqGl892EJUECD2tlIjQUJzskZA5DRqCyGtgWE2qs7wSLCk:uSttq8892agQUikilbgWNwYC
TLSH
T1D423C860AB90EE29CE3723F49172CA63673154486E9BD31731E463253C4E1D54FEAA8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d36027a7b775e4c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9d36027a7b775e4c_0
Size 90KB
SHA256 b5b8bbb75da7bd8d663ef1ec681dbbb28e4cffccef50eabadb059f376f09693f
MD5 0da6cb0c1e344a53421ad8aef2ac2c6e
SHA1 3b18b08aefc75d1c256e12fa131c5815c054db1a
SHA512 613ecff207469efe26533b1e9fa0d198fe2191fe991745d9747d49a7a33e1a10812e286aaea0d91c798b9b14db6054957b338a0c9c5230c401611e113f0b94e5
SSDEEP 1536:IBzzJSYsXCXvMz56a1upnBf9Ft7eY/zjzpg5P9JAgt/gjIFAgmhS:IBw7uvMz5xmnZAY/zvm5P9JAgt/gjIFN
TLSH
T1379329D163913B77CEAE67F9416288277B3594492EC3930732E1B3772C642D24DAEE09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a42ab7bacf7e3ef4_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a42ab7bacf7e3ef4_0
Size 67KB
SHA256 5ab53afb6c99140b608a0d227e26265185a1aeff24fe8349074054439bc7060a
MD5 9281c6b4429b1cd975b121572c5e2f64
SHA1 c4c6ac33e35dd90eda993237a310b8ce0067f0e4
SHA512 53763928adba7379675c20c1ba0e23da336b987f40e740ad17832c4011fb2c90a3c5231ccd42c3135a29e53a4b376b05a64b05d654813d84e11d58a969f5b4b4
SSDEEP 1536:PZH76fpooCFToDzucbrhIRWLV8FyIAy4+umpGLndz68isgPhxaZ+/dqs2h:PVspkToDz1rKRWh8FyIAy4+uYGLndz6M
TLSH
T14F630A81B3C47ABACE1692F947628D677231C0DD2EC3D31761E1EB392C252E54E89F49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af88dc774fded6e1_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af88dc774fded6e1_0
Size 28KB
SHA256 d9e14eb88d02e494903d25cadd82adda471c14a3161263e30f81a09af559a887
MD5 7e97a923f6c844d3e1fe86e036f8cda2
SHA1 2fbf6d87b100c619de5013335a22b4a02567d9ed
SHA512 f0c852dd3461acecd1fcef05b234abd1b962d9ffeee7d3dcdc7c026044e33953743a401058ad3d1a4ea065ccc0fad22686eeefbda48a81714e3fb5b12128ec0a
SSDEEP 384:h9MZrwG85eiNB502WiwikVDtQhfjeDixM1gF77k6ww1DFrihaFWu:PM3GTskhstifjekMKhwEDF0
TLSH
T1DFD22095A7D2FAA9CF2363F802128D627631499C2DE7921722F0F6299CDB1DD4D49C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3eb10ec8b29c6f9_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c3eb10ec8b29c6f9_0
Size 322B
SHA256 32717dcaca2e8d5093ad9f9fce3b302ea16b5620408867bab7c9fd5452c38739
MD5 ab304753b917d4b331d25f1393c6158f
SHA1 880d04a467cea5702b042b1ffe7ee4766aa26148
SHA512 5462a76fa0be9e68e60b4fa9498dd3d05f8301019fd69222456a6cc8b6c37b9c3478ce6c726338ac269be2908a21cf6e44fa53e6daadff531d6a04bb438f9082
TLSH
T1C9E07D9FC4006A44CA3758F0D97AE014D73AC9484DAC80FC30199096A96495212595F7
MD5 SHA1 SHA512 TLSH

Submit Download

c94bcc8b5e263078_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c94bcc8b5e263078_0
Size 281B
SHA256 1c3d5d9c85dffc5d70993ce172bf89b813a9c68311669883192a940f5c9d530d
MD5 2bc03d312aac2450622a540e1a7be93b
SHA1 93bb2049777dc335d859a43d18e37fd09adef941
SHA512 38c0914a728b7afb5da2bcddc8e6db3118a5d4aba199b19a86e9e9a6e8a66a93abd1debb2e9502db4e7d52d3d90c4e6ec5299bbfdc390d54fbd07bf00d6dfb15
TLSH
T105D02B5B41302567C29DE5F9D2E19985C7035048146C9296D41460723014FF3A4184F3
MD5 SHA1 SHA512 TLSH

Submit Download

ce024f381d954153_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ce024f381d954153_0
Size 9KB
SHA256 81cc1bdfa496dac52be2927d663beb10a0489b0f2c77c0e4a668f6e610f6d94e
MD5 58291ec68c46810d78e22ee85f56715b
SHA1 b80880fff78659d71d267735354cc4935c6e5195
SHA512 7b1c533c0c9b364adf3e751300d0b872e0acce85969c89e7f38c29feff58fda5d25b486272730c80da5641fedad084e3ce6bc3e81385c483ee75a8996638ae9e
SSDEEP 192:S9ZmTnxk43BhfDbTC36iAiEG91WHGt/muu5Ej7EPvvPRR0hr:ymj243BhbnC36iAiEquX5EvEPvv5
TLSH
T1F3225246A7E2EE5ACF2313F55261C967B73B42086ED7C71720E0B7341C5B1EA0A4AD4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1124286e33d5a45_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d1124286e33d5a45_0
Size 3KB
SHA256 a3a6453bcbfcf1923ea8a36ad4bd62832a21ae50b93e1cde675177a4e8485e09
MD5 4d3d36549909736ab7909468dbb355a4
SHA1 a5fd3bda0681900b859f8998866f2a0a3a59a7e9
SHA512 637607c1491b1ad0613e6be3879ce381024eb6413b57ae45fe0a3cdc0c7f9cfa4eb8484c84e07008ef129d9f1b40312d5610f106dc1955e9f0af7caf6a6a1a4c
TLSH
T1B481DE81FFC4CF19CB2723F00266C672A332448E9ACAC62771B856392C5A7C15ED6D5E
MD5 SHA1 SHA512 TLSH

Submit Download

d2868483c421dbab_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d2868483c421dbab_0
Size 272B
SHA256 acb5dcd8f1b51a5dfb3e1fa0d26995162fe9fdae5a8b2c195ac6875d9636269d
MD5 e04afdbc61494b50324153de6691fa42
SHA1 4507bb3f9ec4f1295c075490c3dbae9fb90ec60a
SHA512 66b35e983f841a34982b1077c3f5e5db3f2b39e5c79e774b1037b98835d241da836a54a05aaf999853cae718056c014056d45f5aa7c77bfcbc0abf083d0defec
TLSH
T102D02EA7E9141900CA2489F88FAB999A83A68A8C18CEC5F90100E09210B27B3AA24462
MD5 SHA1 SHA512 TLSH

Submit Download

d7cc8069759edb67_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7cc8069759edb67_0
Size 51KB
SHA256 7ca2e91888c20b5def651e5e3304f6ad61025cd8a4cc8cc4be79faaeaba8c6c4
MD5 5ed8bbf9f5bb8a30134e805a77009fa3
SHA1 d1dac87ccf57d4e81066b6b22fca34480348bacb
SHA512 f9ffc5f387e3736515e127abe2989859afc531e497393dcd9cb1cac558c6e63e6493cfaae547cf9b9f6fac57359992bb52d7f7293cc7a6b7eb6d397017b3e3d1
SSDEEP 768:40+A1d/zMhb03YJeO2RLSX3r9x/cOwQLIT18CB:4hc3YJe1SX3rjP/LIT19B
TLSH
T14D33A75167906B76CF3783F40262CA277336819C2ED7931722F0E3292C256DA5F69D8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d890be9becf5555f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d890be9becf5555f_0
Size 284B
SHA256 4e26808dc110bcbab1c8e6cd4ed65b99fc47060e96d8013a7d62b2a264db9f51
MD5 020b61fec2b22069527e00f95cb400be
SHA1 c44488f09e3b198e18ea686ca7b22e584bf02580
SHA512 4eeb0388158882b06afad6923103767875f99ce7e71ea2a128a6ed03d6983d514417337ea66e56f392cbcfaa0fcb7838b69cc08171d8f1fff22632c16a3c5c3a
TLSH
T1B4D0EB2390202408CE2DA8F49AB5220C962348484048C1ABC004F9736A8CCB19213A20
MD5 SHA1 SHA512 TLSH

Submit Download

dc7927bc8d9ff647_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dc7927bc8d9ff647_0
Size 107KB
SHA256 c094411cc541ac57bd36766a1e138da841b18c1f5f9660c928e81102d263ae2b
MD5 b4ca7249769d14ec58209c6e4ff18835
SHA1 e2e716fbf71daa2cede409ca0becd62e1502cd2a
SHA512 2bb15f4bc93b95e01bb270df39e628b42625634156309f2ed730cdacc19c1f975398efba005e5f5ba859365b4591a04312ca9b1fafd980f86c11e40d18f580fb
SSDEEP 1536:jRtqM5wwdZdZ9RajHrKDRRfMX8dOf1VKHWvxNZfzeKWX:jRtiwdtWq7kM21wHAxuPX
TLSH
T198B3C7617761AB37CE2353F94252892B7371405D3E9B932726F0E3352C292EB4E5BC4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df3bcabbe15fbc67_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df3bcabbe15fbc67_0
Size 54KB
SHA256 899c1539d51316cffffcc09f5534f5127ad23bf32a63476b667551d8fead9e75
MD5 1bf7840b09bdc5012960b337345391e6
SHA1 d7e9674451cc06fc614e47c11ac044e4dbab8320
SHA512 d831f4ccd54cb096ba8bf1ac9e26951fd7e21928de78c35e85356230eb1684e8e9cd25638c7567b5cf081d16091932ccb0f953ffde1295a487307b132ebdfb10
SSDEEP 768:E7uXTvlvP1j0uJZJqPRJ44amWGwH42AAzmVCkO/p5oaAntPVppsXppppp:xTh17JZJuJ4wWAAKV05oaAnt
TLSH
T1C843C73DA7886EE5CBA386F2851555EB673110AC19C1C313B1B4C2B33DD95E08E8DEDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f47ade51c3ae759b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f47ade51c3ae759b_0
Size 11.1MB
SHA256 5c267938045a28c569d0c884469ec315d1314e574676cbc63c4ba9c333dc0758
MD5 252c736a50a5590e0c1377bf2a02a4ad
SHA1 38957116663a399528437cd62be807ecb851ecf1
SHA512 cbc8de25dde32004623abe45dc74fd260aba9b66d59385b6928a90ebf2a09bcea846938af78c63be217c429ba0f917fbd3b633e7db58250bdd939322a058a4d0
SSDEEP 196608:5CxUGI+1zuhusoaZjRW3h51PqFV/G1W/JkbKBxR/:5CmGI+9uhusoaZjRW3h51iFV/X/JkbKN
TLSH
T1B9C6E824AB81BE1AC9EB56F50343C85752394DB82F529353B4C5F7783F0E6E30E6984A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd89372d996c8b8d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fd89372d996c8b8d_0
Size 5KB
SHA256 e1d556170cfdabc76008079a8a04fb3dbb297082e8a6d75ff79ffe52cb996915
MD5 3017674cb3b7e15e726a6d2ade3da2b0
SHA1 211784b045484ab7cedbd2aa8d6d2cfb0f68cb61
SHA512 46f756fa562bea7d4480fde0247166e05f50c50747ed3e331476af467854f2ba2b65360dc85c6fc4c35a9a80fe3e6d0d14ec6de1b6fd9774abbd7eb8b349bfa9
SSDEEP 96:KfRydrBflNGMnJPsqwvnMeqWomXJsiY9cu3:4ullsKPsnv5s
TLSH
T165B185416B25ACD7DF2103B87D9A619FBE15464B6E434AF7601B6D283D873FE20872D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 267KB
SHA256 23f67dc1073ee2ca166983bdb9ffd37ad1fee64e7ac6d6a219a2bdc932d763b4
MD5 5446660c054320d62f4e2118228a3c5d
SHA1 6981fcdd09d983701ed4864fff8e8965a8e8eda9
SHA512 b18ea65fd0c94ded5a50bc738e157329d490041751aab005c480d59f5d4086a9004c3a52cd1cb2543d0bcbe5d6838eea58eefbb188b1979fb5faa10929d58dc8
SSDEEP 3072:7tczTIevtBnN/Qdpevtnh3EvZPFNr4QLTP5F75AX:dg
TLSH
T1D844EB34755A72D6F02E837A27218D03D3754ECCAABC7059B5A13E4D12FBB443B9872A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000011.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000011.ldb
Size 23KB
SHA256 c5d3aa8e7fac2032a31c32c2fc0408f83bc61e563809ed6c2119bc1b8b853a93
MD5 922af79634e971962dde1feb6bd7205a
SHA1 3c06b924b585000edf7e2abed7cfd780d391b1fa
SHA512 0f683a42f12c3a71289b148920ffeb0738e0872489225496e8d0adad668f24dfe65a78f9526c262f467bc030ebbadf980c99e992dff6673a360a0dd6667b45b8
SSDEEP 384:bEXWVLrE4IamMSiaLDxt5+lbGGoZl/4AzDb+5uMMz1CCZruWYD:ImdE4IaKDxtM0uAzm5ZMz+J
TLSH
T148B2B0F65FEA8982D27F6377D1FD064FEE28E4097A65E0D96341314D18216136C8AF21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000014.ldb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000014.ldb
Size 18KB
SHA256 da8b0f4ed80eb9a6547989b5a975ec255e70dd3c999e1199430d655574bb5c1c
MD5 287d69a2ebc3196f1943d43f7ba74022
SHA1 89eb140e31afeb13a4ad83cf9f64700fbdfe11f9
SHA512 d8a0d0264de59a64626e320c8e22866bed74ba025fae2611a90a4823beeae3a94fa51077e785a32ccf00597a758d4e4fd14bc69e777028160c718187bb1bb276
SSDEEP 384:4bh+RVLrE4IavdPSnuxext5jlbGGoZl/l7zVar8:AhCdE4Ia1bsxtd077zEg
TLSH
T12482BFFA6FF6C9C1E2B6677792FF0547AA39F1097568E09E6280315E0C306272C59A21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 6c7d7c856f79fea1859bb656c04d85c81eda646c30104da92d6c49d87b91d7e8
MD5 105588ac27c109eb27299a2db57f026e
SHA1 6f5d6d737d235a2bbe870f6eae192c92ec0898c4
SHA512 03a5ff8b5c4ec139cd431fed390b3d7d3c46dc28bfb048d730d81d10f998d6d23d7b689d9863171450954827abdab4d45df21495d347a3e0fa1e06dc8d13da46
TLSH
T180E0202C84C9C15F61A464D71538BB4EF597694FD7CCFD451F04CD247047158967E192
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 3KB
SHA256 e9891fbf2eaab158bc094e255cbedfe4f97681de37ee4a7d46a993af440cc1c5
MD5 ac00f5632b92f1550922e5102be0576e
SHA1 96b52048ede554d3eab9d946c0366499924007ad
SHA512 55331569b8ab6ed58ea37dd08f8c55146d25c4934197e66dc9aa727ca5f8cb9a22ce68e650265ae3b591d4083233e005bd89606a2a8532207fd392e69e5365a6
TLSH
T10B816AE7224994E801C2D1A1C13CF06BCD4A59D6A65DAB14754CB3BF17A061FA7EB0F2
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 612B
SHA256 bebfe4ba12952a25ea8a46ff3e359165830245cb56a895a7dec5c37008b3b240
MD5 0450319b705bc393f31237ed29db8f53
SHA1 03d2591bd3e05b0d95a84e5029047b64f5799fa4
SHA512 3cef79c21044e7a39c919a1ee259728b2c58fe40c959ffcab39e764a0be877764d39a96f220b9803db22f19ef04841859597aeeb93ae483dd889cad1b5022b75
TLSH
T1B4F0F611CAD09AC2DCB92971447BD3A0A723648D1D76C70F61A1D0A6A9523856D0513F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 bcf31d36352e146c1f4d4973637da75d57abb1b14f697e1ee99be5d961dc1f00
MD5 619a56eb941092f00f65f40675a67d80
SHA1 789344eb5c58a33751c3768678c8a7da0dcc9823
SHA512 c104ad2fa5c7717317b35c787714da0731c490494e926e77bf1c919581e964597f3b4be333c9f26b1d7138a0ba80d379c0f2d102e41011440ad40bef90c63967
SSDEEP 192:DEtg3lt1UJVY7JktOEI6JlAJZ7eVJ8JDJALaVKJ4J5JNJZbJ68JiyJDVJeg7JAJY:DEtg3lt1UJVY7JktOEISlMZ7ejYDJALY
TLSH
T1BE32AEE3C3D8822DD86117F0EA543D1BDD2D1E6883283C29D9E5BE4B63E5031E345A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ebe1426ff0fbd817f6e5cdc3238a03772eb1f7063c8d96d7fb7405eb6190ec3f
MD5 0d024f2ff05075a86fea4dbc9684a345
SHA1 7c24095870af9288666a8ba65d217242da2ad26c
SHA512 d193ae98cabe4b2c51ddf060506a736b1e60aa677141a83a3e3d10a88720ac383c984b7f5b6341eb94a54e67eb2204fe6f4363f2bd47c0ac05734286eeb5d8b1
SSDEEP 192:sxRiR/Cw/f0s240Bpq1ztAczoD8pFBN0/g6+WNlTJZBZGp8McEkk2G+IgVBJ:sxRiIw/f0sp0B4xA06/5bZ+gh
TLSH
T15452C65B6968597B9CC7D25DFA51BB17D2F91422A1D05F54E7FC860C00FBADE220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 290034a5e46e1c2de384fcb512d0d8b8979449226095534e48840cfed884b746
MD5 93bdcb1a7371910a796b4777240eb023
SHA1 adf7587346325d813c5cd53c86770c2ca38cd37f
SHA512 592664d8e131b64ad52e701cabb5c092b950fe291671e958ad7ef7c07b51489e23b5f4c4dd189ccf1c64c506384d2333ace9f133cfe2e96d925394815a75b4aa
SSDEEP 192:sxRZR/Cw/f0s440Bpq1zlAczoD8pFBtR/g6+WNl1hBB2GOO2+88McSkk2G+IgDpz:sxRZIw/f0sH0B45A0f/5lBUPgt
TLSH
T1EE52B55BA96859BB9CC7D259FA51BB17D2F91432A1D45F44A7FC860C00FBADE220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ac1f38e7a146f31e46c30a6303ad5f1053eed1b7b95362b8c284ce03842fc282
MD5 cb7a4882a5f900836c027783f60794bc
SHA1 bb3e3f48277765c492b4383d5186f67d8e0342df
SHA512 089f12cbbe6ae27d9e659268a45e390559cb0ba23b3c418c04a47ae5dee7880184c3f1874dff097514036a5e598ffa66df227018052002d4c81f7836cb93aa6c
SSDEEP 192:sxRZR/Cw/f0s441BYZVqHWAczoD8pFBtD/g6+WNlDRhBLAAGwV+iq8McYk2G+IgZ:sxRZIw/f0sH1BmVZA0p/5ThdgZ
TLSH
T15462C75BA87859BB5CC7D259FA61BB27D2F91832A5D41F44E7FC860C00FA6DD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 bb36c4c6b303e4d47a1c39c90f41f2556219cc397fed38f860ae72bb90b89c10
MD5 b14007b67d2c4d6c97077e969814e0da
SHA1 40f21a04fb35649ff449a5c630c44e532f305ca0
SHA512 88f4d32ab5e19841497bdb8c47334e8ab4e5306774c237a0f3731a063d2f9afa51a075be563b1aec7ee9be108a385c2637260b89a8c4069b38a9a799a97b68ef
SSDEEP 192:sxRZR/Cw/f0s441Bpq1zlAczoD8pFBsR/g6+WNl1hBBJAAGiG+Cq8McCk2G+IgD3:sxRZIw/f0sH1B45A0Q/5lBSg7
TLSH
T15C62B75BA86859BB9CC7D259FA61BB17D2F91432A5D45F44E7FC860C00FBADD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 353546b4db6d02c69b5ad11bd9812504ff7ceac774dbd31421dafce8c85c679c
MD5 9c90d914f0b5655da6890ec825c037d4
SHA1 6af6e923ace8b1f2bc72d2697ef827e662ac089e
SHA512 60eaf7b03ffebb677c961c8791b5e25970df1892df8ef062b3aa6d8e4b8d762fa7c1398b1273ebcb41611ad51600ad15b07752b5dbccffdd4d0d046564904faf
SSDEEP 768:UQYiM37pLuL78NWgv7fxJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3pNKIroU:UQYiMxE78NWgv7fxJu1jakfKzU
TLSH
T17CC2EA7B740CCF7E5F800A9D98297E9F6DA802CB56D8CD8047FE951C02C6BFA91164DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\402de7aa-02f0-423f-ade7-590708e9bb22\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7ffdc6f6-eab8-40de-8ee4-16f28bfd0c9b\index-dir\the-real-index
Size 2KB
SHA256 533628f17698583965f44477915d57db3f5b2e143246ccbd55d6c13c1f5320b2
MD5 d070da31a771e4b27085d48e13c396ea
SHA1 735b9ca12a477266ef7ae15ec400e2e112340195
SHA512 60ca4df440337fc444898e42bf6fac0ce1a1203e31baa1c549a38754fe57723b1c129371e7e66233b9a66b591af52406e784992ead8e90eac81659fa7c624492
TLSH
T1CC51654CC984A7EDE8B161FE299515F297752C28FC58C3A18158B1B134136641B5B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5985ff.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\7ffdc6f6-eab8-40de-8ee4-16f28bfd0c9b\index-dir\the-real-index~RFe5985ff.TMP
Size 48B
SHA256 e09f7875634036371f60e67e79cf8fab49ea49d5d308f3d4c294217cdaa45340
MD5 ed99d185b131e99e06c7fb2462738301
SHA1 ba44a8b0f2f0cd8581a9ef09b4538f2fc1603014
SHA512 3108562cfccb0df66e3661c2cf2a0e78bf7daf1de0acf07fc85737768923451c61af3c8eab0e65d0d3f7ca02ec5851988c5450e167319c7cc6815b2a61eae87c
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 f32e67957085b4de68cf8bd77625e39b25e51966797c452e33003ab3475839ee
MD5 57bc4757eadcd73f07592f805e7d5b12
SHA1 77180c9c9bbe64e6f57a99af5c7b31a32e2f3313
SHA512 fea013dad35ce1cb2a9f77939c24328055538210eb908f9d591ed15853721fb003a80b1824ff31f2584c8fec92da7a95c9ad34b8ca7e9c77a037829cadb9ec52
TLSH
T178D023C71F31457319707A84603810ED411E8C879CC4DCD4E904714720B8703E145F37
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 9394dfecc6103c3bab9f3d236e1c3fbc5041397ba3f688d94a7f631a6f8dae4f
MD5 7b13314582727f44ed12d8cd37f30639
SHA1 74efeafba722cd33e7811c512afa35a14c169f61
SHA512 6bb4465d7df48722d72f6f07accb93bfad556fd0fea39c554527858f760185c87e9bbfc023af1abe5cb5c1ac7eada11fd14e62cf14761da7d8896df50b76b7d2
TLSH
T1C3D023D5473145531D70A648643C62ED412A8C078CC4FCD4DD18F0873078702D446B36
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 23242741d7a3d8486080b4d42babe1459dab0b8b39496cdcb531864f61089615
MD5 1bd9323bddb6c238759ea69592fad962
SHA1 4f772af3efb546948b263d31c7086cdab694b4bf
SHA512 93633799e61d178e3f5484df3c326f1f2626f04018a499165ee89d489ff6ba25a1796e339dba816f84386c8cf46513c77b0754ff20e374ed2914e47943b74740
TLSH
T179D023854E3059537E7066C4713461DD811F8D879CC4DDE8D900704760B8703D456F35
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 c365060d86d8719948c186fee8f7a13b1d7477219b460b87233a69574da8b142
MD5 5334132886a38cc1719da9320ee1a1fb
SHA1 ff4b422fef3f16db87c3484dda7719037db560f4
SHA512 05c481525e771831e7e7e7320ebd3fe3e234c9d47dbe0c4698bc46691a3512e54d371348e2c4b7897b1e252acab770aef274857594deae6055376dbd50316c09
TLSH
T1E1D023C61B31595315B06BD46034716E455B8C47DCC8DDD4CE10B087B074303D045F75
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 234ceaa72ae626b652838cd17cfb841c3d2fe29cf5691b06fdcfa8005ce5c362
MD5 f74b6dd7047e41e04cb4dfa021acbd0d
SHA1 145af8b084346e9cb40d5752c23cf6bddcb70178
SHA512 b98c0ab514258c2d7877b2c431359f1601919453c69c11960d862e1e43eb08a626f25d78b513ad8020e08f1233e78939385239c4abaf95e641d4ea9112a4137c
TLSH
T135D0A7854630595226706B886038256D821E8C468CC4DDD8C954709A3078312E191E2A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 70f0c08795d66d685189d2955d4e003ed20fd161d137fbad867baeaada4a54a0
MD5 d2db8adaea2311e0538f766b4e531c7b
SHA1 ffc702f3b2f8ca9fa3a346aaaf41200414b4500e
SHA512 a8576255651b29a3b5a2bbfd7a7d9a0b96555c4877e008769010e54831a5d9c2d5a533f62e37c3628111c9e70595623ad20f9c5ac15fced801c974135bc9eeac
TLSH
T115D023DB4F3056531770A684647415AD4557CC47CCC4CDD8DD107097A479703D0DDA36
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 5e888aaf0a8bc8df60db71f68fef7c1c41f3a1220e9b3907b7fb395291b432b7
MD5 ccfae6e56329a242ad04c6df5a1fe696
SHA1 501caf07a4db2763409895d8df7141e1cf7be7e9
SHA512 92ee8daa11a2c24851d30ccb216e497093b52a2b5eeac26efa2027d612afb5578bc5e41e1d675dc8812a8d785e992b3e7cb67f6b288e9222ccb1735b88ffe09a
TLSH
T11ED023D757315E532574A7887038217D52279D469CC8DCD4CD14708730B4702D555E3A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 79eb67007b281542d31069b86ad1e415acceb35f7dee62ca0c07bf09c64cb03b
MD5 2d272f99d09e81315212aa410375b7ee
SHA1 6a0cce1133c427d83a161a97fcb3198783950afc
SHA512 8839df7d4400cee71643774a4b000b0bdeeff0207a01bd7896e39dfcf1a361156a1cd41ccc54d08f02fc55dc8337b150af8b9e17e9625eb01f654fadb53a0660
TLSH
T13FD0A7CA0A315D572670669CE028215E46178C479CC89DD8CA1470C72874712908AA26
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 bd407f855c4110254dc03f8e947b6b52fa1016a15c430930d2c3e75db1ea0e55
MD5 5e98f2826a67dc6cffbb5ab0e663e75b
SHA1 705bf4f174afc6643446e40d3864d2484cfdde9a
SHA512 6e9e519b8d7cc960916ecaf7fd8498bee8026cc0aa02072082faf9b6a9d6bb2252c596682fa46cd8d7367675272ea6ca30074da19f3f5b31962205c93d6e7244
TLSH
T12AD0A7854631955715706A88613421ED451A8D56DCC59DDC9A14748720B4303E051A25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 079ed7135cdec3825ff8f30e98131398cc87cae4a8530a05c99693ead2e598ce
MD5 9ecee86f5041b1629f03148aec3d27e2
SHA1 24b75921ea1b1eac2ef0a206136624035b720d4b
SHA512 5893115f0307dc3bf3fc1cc5d4b8200bf0b8d99b09a5b4418f1eef3e3336321b26298473fe4406e8b3ad1d2c6c05fa50589756cbad4aa16c74a7f51e6f1abafa
TLSH
T19ED0A78A4A2199531770A789603420DD512A8C0B8CC4DD94C904709770B4712D142B29
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 7e8380172da0ee3160c521b6979f18bbfcf1be56c8babd29a14515e773f1649d
MD5 b4be3872d3678cca1d41fa9b3a74f886
SHA1 61f620313b9c9164d3226323df6a4d19ee2f6734
SHA512 d381da968ac8621f0f7c9dfb000de1d31a3f9c9dd7c001e8d63450eebf5d552b590814e10a04785be6d60bddab8df934a7526e539d89d5be531d9f424e959a6e
TLSH
T135D0A7951A215A6316706688213421AE81278E459CC4CDD8CD15708774B4303E145A25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 b3c23915eb9c56b7e6d8b1166af9116d6f7edac2488c8e6a8b4322a739c23e57
MD5 626acd9d5bd95d5c5c8ac986c5bab16d
SHA1 81d22b8c0df16f0630958aaec616a66169cbddb9
SHA512 236556979348a2e73b897e3c799da3d9aab3a9fbc7fa82c9b87d021e849bfd06d7bd349f22477f33e55787dc7e2fc12bc6cec099a9c3dc4ba383c4474ac5336a
TLSH
T178D0A7975534466216706A44602420AD4217CC4A9CC88DE8D948B08B70B87029146A25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 85eab1d0c189485da30c90dbce821f8e00e07e1bd970dee786d7403f2590ad9b
MD5 9c3ef8fd3aaa050ae75a55d00878ab1d
SHA1 6e6cdad2b8294077fdcdc06eef8f18f58b56ecc1
SHA512 299558af3fdb6a5dbc5166512885d6912b29ac8b2ac2010ace4a4a61e3fcc717a89646e9eac2b131460c55a18ce59e6e1b9e4c088771174350ae439ed4459096
TLSH
T1E2D0A9875B344A636AF0A688683420AE811B8C1698C4CDE8A918B08A60B8B03E142B26
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 9aa08de4a938bf3537e1aade013497d9470cc34af527376bce62451e0cb26156
MD5 245384eea6ab2fa7fa583f8984a224ea
SHA1 20a6b0fa1e8a273582586c5aa9576059772317db
SHA512 6fe2cf8935e0547c1073015d6e74a195396071eda3ee84831b5cb1fc2afa3beb73e4ff09420eb7970f92d563a6cddb0768d1719bf5c4bfd93180d7dc1177dab1
TLSH
T183C09BD71E14569759B0B7CC7034727D961FC54A8CC4DDE8D514604760247135586F36
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 1d63a10b5f37a7220aff8bf4731ba9960bacb4109b5151a3f6f6629274c46e1d
MD5 37f06d73d251756f738b7f7729bb97a2
SHA1 ec6c8299197b9e64d9fb26741733c2cea56d5f24
SHA512 29474e8d19b3941eb029c1739885b1c46ba11860dfcbd96403cf37490385ff6e0a7482d2b8ccf0c7b55948ee25f3ed7ad92926153c0bb259eaf5b10323514a9b
TLSH
T1B0D023C55B31AF53357077446034325E811B8C478CC4DDE4D90571C76078B02D145B39
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 130B
SHA256 ced868d02327dc5d182fd3c31b49a6b270c6c8339596a79e650a5556279ed621
MD5 e9897ea8952a35f9dbf15d330afda309
SHA1 32c7aeab3cc6ecd88ced4cdbe8e77cb65106eb67
SHA512 05614937cf24f4b40bfcc714c8db867602a17f0476a396bd1fb0baf71bd208a8463d5971688f528addebd4b9a1490df821167e777d04306b8afcbc4dfa319b62
TLSH
T15BC09BD71915979749B4BBCC2034726D961F85498CC0CDECD5146047643571355C6E25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 3d5449b402c817538013500d90b54c347b467c6276ea833c6119d09d58d37034
MD5 ed7ef95abc8292c475e30280578330ca
SHA1 7a1ca390cd4f508f343157a85d1bc95354960c07
SHA512 9a56e5863d0ab334ea06c0595124909153e3a86eaaab0fa9ef9bc73add5e65bcddf28fca795ecce95c70ca6bdaaa8c4a2b70bd4f1e975d7e7193595cf12be34d
TLSH
T16BD023CE4F3156539AB06F846234217D413FCC568CC4DFD4C904B0C72474702D145A75
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 214B
SHA256 f65977d2467e557535ad9161e79afc26dd88757900c9a62dbe05d4da7d21fff0
MD5 d439476823ae67f640d164854bba816b
SHA1 d32b5d68b6ef9208988cc9e507acce4d42ac5749
SHA512 2242a90f72142f9efae420db9d2a0e7fc2e23da85ff59af670c89510e87bcc6fe9cd50cf843dc51719dc48517cf52a46abb0e13b94beb784f29eeb0a425008ae
TLSH
T106D0A79646318A571570AB482024259D411A8C06C8C0C8A8D554708B3878702D685A65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 132B
SHA256 57e0b1996f5c4a7a1f6fbd57f6398f7a91bc03109866cedc961dbb25e1f4b956
MD5 a6f95fbe2896ffd46b1551faccd7689c
SHA1 f3ff10083f863e2b7aaa8d3f809fe527049873f8
SHA512 0d3ce72d524e3d07d44f2eee67df74d4c7564ba687df7eca43e109425f80f6af663de32a04905695687dde5a3210f0ef76c4213f66524c56b8ec9bac9c8aaac3
TLSH
T1A5C09BD71D1456A759B0B7CC3134727ED61FC5498CC4DEE8D518604760247135586F25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 216B
SHA256 54c341ab44b3319b0943d60a0b61d7576e49f4f61e94042d36709cccb855f174
MD5 c47d9f8275d821a79b06dd53dea02bc7
SHA1 4b99fad0d635b77a0ebe7f404f2e42455908a20d
SHA512 d3f9e46e87dc7c1f8f71e054304b72e93a2651a0e11b1f0b02eddd1db65bb8ffc12c09ae2a089aac6e2de02b9b8c555a87106c53a66bfbc973dc5fd006befc52
TLSH
T148D0A7E756305667267067456138605D41169C068CC4CD94D919B04B70747139641A25
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58ff99.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58ff99.TMP
Size 137B
SHA256 d45945084eb5424960a869ead772977361690c247c3759aba3a02bd6c04b96b7
MD5 4c36eecf8739247f34c390f037422baf
SHA1 b1eeb7d22fea89d61d3c90c87909fcd27ccc2494
SHA512 76815a8dd3ec9e6a79b772377ccce1e6298ec0657241b67571d3a0a06c8315518659425217e279619344eeec363443de68b6c88ca930133a22d3ecb68d74abaf
TLSH
T1BDC09BD7191456A75BB076C86034729D961F8D8A8CC0CDE8D515704770347139585D25
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 f40eda96b28b04c533ed67a2538667f65b75e78d501396fee5a40ec43cfbb64e
MD5 e9a3be64a1537001e7a8075475997d77
SHA1 25230aa16c82dfaac819c15aef9c441fb2571308
SHA512 6c62aa137d063158a96808c7c0184be9e1dcb7581dce6b56062c96febfcd47020f7a5e12ced4f21615f3f26e74be46bf2caad295df640af97b1fc5a15fef7515
TLSH
T112A00235858D6101C80247F05C55254823D488B1410222014898D0EAAD99153B649221
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594ee1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe594ee1.TMP
Size 48B
SHA256 dd2dc3079a5c8c9c06ae5b34c9605fe86ea2d32661b423622003b9282ae8e074
MD5 2bc288150a1ddbcc9f069e2672724dee
SHA1 53e67c76221fd18f126a443ce5dd3c99df7494d8
SHA512 9b0d605e3cfe04676526a3ee93fd9f59dc43a6e777d8acb23ee88e7919982d56b4b391e1372d4f2e992a9680fd5d813bd4f5891b2654c4fde4632bbef314f617
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 22718790b0cd2cb8c351edded86dad6a78e8dda726a67c32578b58908e60cc77
MD5 8be6136047a163e4b78a8833fbb91886
SHA1 f8b757c064f95bb011b990b1463e5233ee02ab37
SHA512 a3b5c9b0c3791511be96f4e67a8f12f37114b620391c840cc05f02c9a6eb0d43f8899544bef2fa87b12ca6b0d64e51a32319e87ae8568e0db2997bfa015e6270
SSDEEP 96:KRm7KmgIIOW4tVgGOK47g0OcOGlkafG6MsMaW0xpgqaK4vgwac6yZIKT+RuKaUq6:Cm7KmgIIJ4tWGm7g09OGlkafG6MsMl0Z
TLSH
T18F916601727A024038BE790C91B5886BD2C2756B3629E43B7BE815B30F67E475DFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bb073bd9-1b7a-4c26-b139-42c6b3cd0761.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bb073bd9-1b7a-4c26-b139-42c6b3cd0761.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b1c88bc8a9415debfbd1bbc44395adb01ef9ccf8452b7f291692582a0b186c39
MD5 12dbd6970027e312e8cbc2f3e5e99e63
SHA1 30ada5237a08c8861c5147456764181697d14a41
SHA512 37444246cf1d2b5dcbb177b68723bb8dc82844c74188d6795fab336ea13c0bc60f15bf6eaa52f4ffb405ab259b6a4f7688a62f1dd1e71ac2f04d3c2fc74a2ae9
SSDEEP 768:QWFQF3cwgDgvWTfV7Hucys6BRvi82oP4/z6himo6yb9My:QdF3h3imOz6ImoRb+y
TLSH
T14E039E79E854CE77ECEB87C5B6857A53AEE01233858C99C4EAD99F0D01939DE070BC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e2b922da6ee9a0868a8dcd6e30d91759bec80e4c87d52e2a8d8feef27532bb3d
MD5 50ff1d3ae6c59cb20b42f0f9bf6996fc
SHA1 fb3c39107e4cb4507f0fb1d89c80bbf4799d8069
SHA512 8088b3f83b41ae7eb24fd04b8c7e3ed0f71bcf04735f75b2ba98a611fee05baf21f720fd4f854c6bd315c2958af8ec2687370f43be5446ddb1cd211eb4fff01c
SSDEEP 768:Lkrv+4UNbdS3ngKlYyPfn7Hucys6BRvi82oP4/z6himo6y530l:Lkbsbw3w3imOz6ImoRWl
TLSH
T1C003BF75F4698D73DCEB8188B0873B937FE4212344895A94E9DA9F0D028799E130F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 17e9c241fd35350b1e797bcb1310a66f5e6d8c09b163eeec2c291c16238b4792
MD5 4a007ca341a3bb0b0458e4dabd5a8d8a
SHA1 8adf0be6ec06bc7b9a17605d042db5649b9dbf52
SHA512 06b0ee9cfe7296fbbf0abc2582687b73927e9a14a04a1e279e96bcae45cbd2dee8d29370618131f2d13bead5fcdb8e9775eb1b015b6678026828316b0164c8d6
SSDEEP 768:vkrv+4UNbdS3DgOlYyPfn7Hucys6BRvi82oP4/z6himo6yb9Mj:vkbsbw3Y3imOz6ImoRb+j
TLSH
T13A13CF35F4598D73DCEB8198B0873AA37FE42233858C1E94E5DA9F0D069799E071B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ce57245818e96606f66358d482aa3a6af554026ac686377fb1f3a2248e9ce457
MD5 4a786973458cad03606cff5897a62bbc
SHA1 c5a7635b28e75ad9e464c28b2da6b6267ad8c2b8
SHA512 90338c5c844ae262d1505593eece49fe1afbaf2aa0fa72d1ce821c74904e544d16f42f82ff5c81bfcd6be12d0f970bd06c232110241cebeb11fcfed95e916a2a
SSDEEP 768:vAh3VgClYyPfn7Hucys6BRvi82oP4/z6himo6yb9My:vAh3u3imOz6ImoRb+y
TLSH
T105F2C074E8558D73DCEBC199B1863B937EE06233958C5E84E5EEDF0D069399E070B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 7f09fcbedbf366080948e707c7a2d347434e3df12dd21692ea79d6b844e8e743
MD5 6daf63d8f11d540101dc2707442bf9b0
SHA1 a964a82ac7e15d6ad6dda95c8155dfa0017eacb3
SHA512 9668069b1100d89f32013e401b162fe742e52c1e194e994ee016a8a6b8cc4656118c21ac452904b94f43ac6641d16ea9b0fecc1740cce55e9da4d9d567d8e74c
SSDEEP 768:xGrv+4UNbdS3EUKlYy+7Hucys6BRvi82oP4/z6himo+dZ2bwn+h:xGbsbw3Ex3imOz6Imo+Z0w+
TLSH
T11E03BF36E4548D73DCABC288B4467A637FF5522385C91AC0E5DE6F0E029B99E131BC63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d46696235d76ae683d9851053b1a0a66177fbc0d33cc61127dcb97a333e54877
MD5 39f308b08f05d5009af1f191008d09b7
SHA1 8e0ee99438a48fe6b2cfd3b3f0c0917922315d52
SHA512 a5e5c0d5f299de9b6cfd9e81440750a80fa47a11b07783f0e3a5d85c323c120a71b926b279b0138df869e2dd0e2e90b154aaa7740f392a13360d26651f64b47e
SSDEEP 768:4Ah3lg6lYyPf97Hucys6BRvi82oP4/z6himo6yb9My:4Ah3w3imOz6ImoRb+y
TLSH
T1BFF2C074A8558D73DCABC299B1863B537EE06233858C5E84E5EEDF0D069399E070B422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 ed6248824099acbf41118ebf1df2065e840a3eb314013a7d517e435c2a92271a
MD5 a44f24bb76067f5cc8b01e540e46b87c
SHA1 9d2ffddb19cd639284ff426a51037629efae6165
SHA512 06e8dbbbbeabe29c5ddb3e4e02f3a6eaeebe70f3808e0e8c8c73c007f61e7f0b6bbfab95d94819866649ec1ed8d7f0149745120b332fbe732da94305e3d961b0
SSDEEP 768:LGrv+4UNbdS3NgulYyPfo7Hucys6BRvi82oP4/z6himo6y2bwn+a:LGbsbw3p3imOz6ImoR0wJ
TLSH
T1D803B075F4588D73ECEBC188B0467A937FF4126345891A90E5DA9F4E018BA9F171F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14c27ccc-ca34-475c-8129-deb0cbb66ca6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\14c27ccc-ca34-475c-8129-deb0cbb66ca6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
MD5 ae3a19c226264ff6cb64877f1e7e7243
SHA1 f993431dbd09200fd92b7a04ee6711a54ad95cc9
SHA512 97e5dbf0663585afbb5e0f2b5a36192624eb2c898462abef65225987df632d30f74f05ac5a71175c4c59f75d9ae6d2e640d168e479cb26b9a6857c71efda029a
TLSH
T1C1C02B85CB1E0C854E78153D48420B2727819F0030508534445A490C41741CE00888CF
MD5 SHA1 SHA512 TLSH

Submit Download

4cc0a39b-70fc-4950-ba3b-7b9828221fbe.tmp

Path C:\Users\Admin\AppData\Local\Temp\4cc0a39b-70fc-4950-ba3b-7b9828221fbe.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\VCRUNTIME140.dll
Size 117KB
SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
MD5 32da96115c9d783a0769312c0482a62d
SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
TLSH
T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_bz2.pyd
Size 85KB
SHA256 d28c3dd1c22bfb8a6e8a6a9c2359842b797d08e878ecb7805f60e86a45589d11
MD5 207d4a4b7a113ef494514918f2dccdf3
SHA1 74b59453b5bb6194e0d2587d26d499d0f7e1aed5
SHA512 f7e5a2608ee19fd400d4bfe27e8603289a219af6a4a4a9e65ebb76c715d926fb9b08293fc2a3fed2195784804764265fa0b356547f23c501ec8ff9487c948b27
SSDEEP 1536:xtMtz7eksNCb6YVVEFxO2RqOyuzotWw8pRbIiQIG3VTy1Ni9QfIY6utw:PMtzSqurjOqqfgotWrplIiQIG3VtKtw
TLSH
T14A837E86B3B462B6F59B81B496910353F730FF960710A3BFB25482863F13B91AF58365
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_ctypes.pyd
Size 139KB
SHA256 25d9b0be550d428fecc697ca20450343a7c3ce77c9f5283e9aecfd188d609250
MD5 eeabc0c7756ed7a29e33e467c398737f
SHA1 ec5c401946a9df4e4ab764ddb4639e4e33e1ce40
SHA512 5e1e93545e1be34880fc680ca12004792076e88baa6cac4512fdbbdb90091a9ae441a16b8d24f64c6b03bf14903babddecfa783ce5c016759ed790c0eabc189b
SSDEEP 3072:G/n1qQ8/27N56EBZrGwrb1OzIJswKRW2r7rw8IGGPzoGc:wn1JDT6wrszIJfUDwtc
TLSH
T1A3D38F4B336841E6DA678138C6739E47FBB1F4511A10878F4264C99B2F637A2AE3F315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_lzma.pyd
Size 157KB
SHA256 5f7003f9f0256e36351ca2810b3485db28579b08e4d1d65f6f211fcd1136f395
MD5 cada2b240b280f172aeb32a1666b21e6
SHA1 c15dc39329444433c255309eb89bae188aae1b22
SHA512 8b12298efd28549d46e2c48cff94b07039cf513bbac25063ebad8bae57b96e07eefd7df82229441af142c1b96dc837dec468263c0873d14da280e3ed6e42eb9e
SSDEEP 3072:BJ66g4T5QW7JfyjEqkSkA51b4pznfJ9mNopUpdbQIGI1HFk:BUR4Tp4QPZ8N4RxYOgbPa
TLSH
T110F34C86B794F0E6F7328C38D2624F57E6F578590320929A01CC976D2B1FB759A2E313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

auto.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tcl_data\auto.tcl
Size 21KB
SHA256 08113823951619d659eb03a1f6acd2f9500e1264795219125a5df7b83cabcb99
MD5 97efa9ebe840ea051f9706504c8bd783
SHA1 287dea14d47977dcd8edc525fe750c836264db5c
SHA512 ab9fc210f3bfd181cc2b93dd348415f67f763b2c7961179a88eba3f7f87e44b21a66ea4ea53715fb88784288c75b8270640f3bc6beafb0e8cc21966068a79bf2
SSDEEP 384:UqT9XC9VZvWQjCTzsCTV7672ORgS0myvxFRTX7Xvt3wBTnbXhCUquyvz:LT9XC9VZvhjCPsCp7JlmyvTxvt3gTnbW
TLSH
T1EFA2B7635F9542A630B1C22B553DB9A4EF2F81B70675801D38F8912C37F1815C6BEAEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cp1252.enc

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tcl_data\encoding\cp1252.enc
Size 1KB
SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
MD5 e9117326c06fee02c478027cb625c7d8
SHA1 2ed4092d573289925a5b71625cf43cc82b901daf
SHA512 d0a39bc41adc32f2f20b1a0ebad33bf48dfa6ed5cc1d8f92700cdd431db6c794c09d9f08bb5709b394acf54116c3a1e060e2abcc6b503e1501f8364d3eebcd52
TLSH
T13621362446A58CD8FA4F31D520ECFB70453B75F3D1DA629027B88308E789E8D0C897D9
MD5 SHA1 SHA512 TLSH

Submit Download

pkgIndex.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tcl_data\http1.0\pkgIndex.tcl
Size 746B
SHA256 77265723959c092897c2449c5b7768ca72d0efcd8c505bddbb7a84f6aa401339
MD5 a387908e2fe9d84704c2e47a7f6e9bc5
SHA1 f3c08b3540033a54a59cb3b207e351303c9e29c6
SHA512 7ac804d23e72e40e7b5532332b4a8d8446c6447bb79b4fe32402b13836079d348998ea0659802ab0065896d4f3c06f5866c6b0d90bf448f53e803d8c243bbc63
TLSH
T1720110C7AEF563A02C318B82364BE791DF1DE218F37256FA7450541C80A3866AB4A934
MD5 SHA1 SHA512 TLSH

Submit Download

init.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tcl_data\init.tcl
Size 25KB
SHA256 acacce15658dd7ce8f69b1e3d3a94770a22972a8e906eb3b61cd06f0ecd5db59
MD5 ffe4e47b5f4f96ec33fb31d52ef0b636
SHA1 3a625e493f8778277f65ffef1e0879fbec0e4d0d
SHA512 dbbfd92ab6d95672f7882f3affb75f31749281c7450c29fcef58b5bdfd4f42b6d1d9f3a50ae0d3aa27e95d48918ed55cde5149751f892538bdd2dc39c618927e
SSDEEP 768:+XrgPHudKlE7BG6Xg3tMo846ofRRECL9QDjr5v7hzx/i:igGdKlK4Ao846offLmNhNi
TLSH
T104C2A8112388917932B3533686B5E598EE7EC1F706A941BCBCCC825C777150A4AFDBD2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pkgIndex.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tcl_data\opt0.4\pkgIndex.tcl
Size 636B
SHA256 68accee3eb8d0f134f9472c95425190ec08e7793df20a58d7d35325f42804695
MD5 93a0e83ab0a3545c206dc54e1206e368
SHA1 45fd706f83c43a7318358033e553d8c9b3210e4e
SHA512 6e18c1bc98bd2d838570fcc68333aeee7fedc746547484fb09f3b7105bd198bd5201a0ce4e647d16655125fa764c676b7ba4bec9c992e37b438e199c708e643a
TLSH
T17BF00266EFE183A495618CC33644F7916F2EF078726010F57414E49CE2A00A75F9F471
MD5 SHA1 SHA512 TLSH

Submit Download

package.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tcl_data\package.tcl
Size 23KB
SHA256 b471cec9056b62d562020b14d69d4bd1f92dfe158afc8ba81c6341836211ca46
MD5 6a7b6485d3b290fc5d412ed1d62a170d
SHA1 50475e80e3969de279edfb1bf8d9c19694c36c0b
SHA512 36ced797ec18d4aa68fcce57f6eb510e78508d14646cf43ea2effb6f2cf88529d0cb5a4a136fb1252edbb95cba646bdcd19a8cd90a86b19fc28bb9611e2ccb73
SSDEEP 384:8xgrmNIpEHsDAW2UfnImRqXqQx6XmchmCWhzPLrXJjJh6PLfzd7lG:8xgrmNIwsDnvIm86QGRhLWhzDzJ9h6DS
TLSH
T14BB2C821B389915A34B153639B352D8CCF3EC0FF51A951BC78D482BC776092A0ADE7E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tclIndex

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tcl_data\tclIndex
Size 7KB
SHA256 577f042bbe640e2739606a1f76098abdb8bd1d1f31526402fb82b21091644f65
MD5 42ec37eee38d6dd33a9fdecd7f1cd0aa
SHA1 6c8c93e5e5350d93f63f3f99d587ab8fb5aa496b
SHA512 37d61f27da79c494d225543828c9a29f1397c57506d609481036bfa2a336ec3110e6d10670edcf211a5714629eeb7e16dbf04a8388bc6bb420584edc06dc534d
SSDEEP 192:eeV1ffxNFxI5XgipSSMw+5p3fphBr2tm87RtmAjm2G03BgPlKif8Qyly5mg2lkYf:eeV1ffxNFxI5XgipSSMw+5p3fphBr2t/
TLSH
T1C8E12C1AE354C51883E485174959DE983AFEE298D32CCC7EDAB491ED10B20176FEE4F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tm.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tcl_data\tm.tcl
Size 11KB
SHA256 f0cc13daca21fee538cca757aa09e88a969a85174eda26e61e573dda6c7ba413
MD5 5746f2c35a7c434a78cc127f8d522e8c
SHA1 0b438de8ddc24b2d805a5db2c8c9432a52c6e53a
SHA512 0a9038474b7bdb9469b7684b5b3867982a29bebbdf017d2dd21edcdd79dd3f67f4d99cdc0a11b3aa7b170b25644ead896489edb9a9a692ca654c0e7bed95ff42
SSDEEP 192:55CjnlRfMf8aOH5bEcKBNkkrgpCmqkkuoBoh9PTYMsvSO+Hy1h/1uKisM68E:5q3MfmH5bEHBNkkrgomq/u5PTYMC+S1Z
TLSH
T15F42B512B3CA536A62B313155EBAF294DB2DD1FE17E5506C744D81A837208280B7F7CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

button.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\button.tcl
Size 21KB
SHA256 1f5dd8d81b26f16e772e92fd2a22accb785004d0ed3447e54f87005d9c6a07a5
MD5 aeb53f7f1506cdfdfe557f54a76060ce
SHA1 ebb3666ee444b91a0d335da19c8333f73b71933b
SHA512 acdad4df988df6b2290fc9622e8eaccc31787fecdc98dcca38519cb762339d4d3fb344ae504b8c7918d6f414f4ad05d15e828df7f7f68f363bec54b11c9b7c43
SSDEEP 384:Tv7cBCAsj9oqlFFSsB3VfRt+lMpWaNwJgzCHarc6gAsj9oqlFFSsB3VlRtYlMpBz:TvweHBBTfIZxHBnZWqbJPBFIaVlCj26+
TLSH
T19DA2CED1CA01437667738226957FA260EF5050FA86AB5418B45E80FC3FFF86A466E3C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

entry.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\entry.tcl
Size 18KB
SHA256 6ac78f764434f932d37e8183aa6db5d04eb1848b774c92f7abc243ecb7d4a59b
MD5 ce819200e8cd36e4458b4cf47cfe9107
SHA1 d04357d9e236f83bb0d2f5db97e9ee228c34ec80
SHA512 6576612c380ab04fa75724c72108a2f386d7f75c9db7a082445778f675e268d0594280a7644aa9ff3ac3d29026327b84a0990ee0c7a9f94bbac3ae63cf91e1de
SSDEEP 384:mDfyPIlBk3yrt8qLjtpa+qh+rA4rsWRWrrMUtCPnsKAN3Pp64ZnCD:mDfyPIlBk3yJ8mtpaplcpwo
TLSH
T15F8241D62D05577562B7C373E3ABF600FE36907722974026759693A02FB6022036EFDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icons.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\icons.tcl
Size 10KB
SHA256 1264940e62b9a37967925418e9d0dc0befd369e8c181b9bab3d1607e3cc14b85
MD5 995a0a8f7d0861c268aead5fc95a42ea
SHA1 21e121cf85e1c4984454237a646e58ec3c725a72
SHA512 db7f5e0bc7d5c5f750e396e645f50a3e0cde61c9e687add0a40d0c1aa304ddfbceeb9f33ad201560c6e2b051f2eded07b41c43d00f14ee435cdeee73b56b93c7
SSDEEP 192:0nEPytJLl1S47T3YqN5/vkJpnhXqBB4aw2rqZiygTtYTpOq/pc75Mk:xqLz7F5KTqBBLuZ1gTSsqhk
TLSH
T182329E33554065820BF7CDED7B9BE289FD5004AB260D2885B48A832A7FB5550EF317A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

listbox.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\listbox.tcl
Size 14KB
SHA256 47c75f9f8348bf8f2c086c57b97b73741218100ca38d10b8abdf2051c95b9801
MD5 804e6dce549b2e541986c0ce9e75e2d1
SHA1 c44ee09421f127cf7f4070a9508f22709d06d043
SHA512 029426c4f659848772e6bb1d8182eb03d2b43adf68fcfcc1ea1c2cc7c883685deda3fffda7e071912b9bda616ad7af2e1cb48ce359700c1a22e1e53e81cae34b
SSDEEP 384:apDYV5Yupn5OcckwBv3HCpg2J8JvJBfWeZhXkz+WkHGowv:aPPkevB2JuvJ9D3XmSc
TLSH
T1246242C42C34637171FFD22746FABB81FF6990A70595504438ACD0A4BF758B246ADACB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

menu.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\menu.tcl
Size 39KB
SHA256 ae4ee8400174c798337b9c60867cbc94f811b249ebe6dea21ec6f960bcf5f8cb
MD5 994cbd4038eeef9991f7d6086904166f
SHA1 24c05d55e80ddc36fd207eeb7c0fa262573d67d2
SHA512 d1a9c8c89025b305af52f1510b3d4d2a3c556847d345844367ff34c89b917f1646de81f08994ea1697f8f8526d9fd2602f9ac440b52097cab5951901dbbd6ebd
SSDEEP 768:NKJsOtO4IzOQj4+Abqqzilh5QU4Vjj9eCcYyq4xYpKgnP:NKJsOtiOQEzilh5Glj9eCcYf4s
TLSH
T1F00386906E09E3335233D3A683BB9044FF3A92F31346609C745D92AC37B58164AFDAE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

panedwindow.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\panedwindow.tcl
Size 5KB
SHA256 aa4f87e41ac8297f51150f2a9f787607690d01793456b93f0939c54d394731f9
MD5 286c01a1b12261bc47f5659fd1627abd
SHA1 4ca36795cab6dfe0bbba30bb88a2ab71a0896642
SHA512 d54d5a89b7408a9724a1ca1387f6473bdad33885194b2ec5a524c7853a297fd65ce2a57f571c51db718f6a00dce845de8cf5f51698f926e54ed72cdc81bcfe54
SSDEEP 96:ssAXzkTQ9w5fLQYkJLZkRXKUXfwyZTq2sz8j2Em3YKhrYK:jAXgE0DQpJLGR6UXfpqnzG3m3YKhrYK
TLSH
T139B137F6D34895AA7071530552BFF39AC672B07B515F81283806C0A03FB698BE7B57E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pkgIndex.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\pkgIndex.tcl
Size 376B
SHA256 6127926b94db2992ab450fc6cc2ec3d071f7bbc856656d0ae20cc3fd4036f547
MD5 62a8e4b5aeb35286e3b1d54973139a13
SHA1 1064e7e2765f9aea5d06ebdd932c689a877613d5
SHA512 919e9a1c7d02cc886bb3901fd0d2966df0f5456f4646310d5762cd74c5b78f2b1b542b3be78e22dc9b070ea1bbf401dda7ecba223b1b1851feea028047bcbe8d
TLSH
T1DCE068C84321AB1A4AA26543A894EE4C3FEE90BFD90CC18D301521DCEF12080A9DD8F5
MD5 SHA1 SHA512 TLSH

Submit Download

scale.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\scale.tcl
Size 8KB
SHA256 0747a387fdd1b2c7135eceae7b392ed52e1d1ebf3ffa90febe886dbc0981eb74
MD5 d45202d3d2d052d4c6bfe8d1322aab39
SHA1 8cdf184ac2e9299b2b2a107a64e9d1803aa298de
SHA512 27b005f955bae00d15c4492e7bd3ebdc5ee3bf9c164c418198b4bd185709c8810aa6cf76cbcc07eeb4c1d20f8c76ef8df8b219563c18b88c94954c910bff575d
SSDEEP 96:GSusE8YOdpO4aDtao+QYa6t2jooB6ajpaqa5xQGmLGKOC9dLrVx:KsbYQO48t+QYa+NkFjpagGmKKX9dLrVx
TLSH
T1000250D06E82A32D5133C27A51AAD580FD55B0F31A875808785A84E93FFE87542FEFC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scrlbar.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\scrlbar.tcl
Size 12KB
SHA256 eec90404f702d3cfbfaec0f13bf5ed1ebeb736bee12d7e69770181a25401c61f
MD5 5249cd1e97e48e3d6dec15e70b9d7792
SHA1 612e021ba25b5e512a0dfd48b6e77fc72894a6b9
SHA512 e4e0ab15eb9b3118c30cd2ff8e5af87c549eaa9b640ffd809a928d96b4addefb9d25efdd1090fbd0019129cdf355bb2f277bc7194001ba1d2ed4a581110ceafc
SSDEEP 192:Gf7RV8ei32PHKT8H2wwucyRlXn+kl1nBKp4nu5FCyK:2mei3qHKT8WPurnXn+I1nBg4nu5MyK
TLSH
T1004284E20D4241FA51FFE2B4FBA7C258E565A0F78B4AE0803415BDE81F2657503BDAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

spinbox.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\spinbox.tcl
Size 16KB
SHA256 747889c3086c917a34554a9dc495bc0c08a03fd3a5828353ed2a64b97f376835
MD5 eaa36f0aa69ae19ddbdd0448fbad9d4d
SHA1 eb0adb4f4d937bac2f17480adaf6f948262e754d
SHA512 c8368f19ec6842ed67073b9fc9c9274107e643324cb23b28c54df63fb720f63b043281b30dbea053d08481b0442a87465f715a8aa0711b01ce83ff7b9f8a4f4c
SSDEEP 384:IMpfyeKu9TzD0E8+9T1wqBaQKpiqQr7E32fnzXfWJU:IMpfyeKu9Tx8WODTp2zPP
TLSH
T1EA7233DA2D14632D6173C33792BBE305FA2690B7569F40203469C1943F7AA210ABFBC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

text.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\text.tcl
Size 34KB
SHA256 f7ecc5ae6eb297c79aad5cfc200b29c4e72409641fa369c5cdbba30ae41e982a
MD5 016613531555c4f30f670dab58f10b3d
SHA1 3afc8aa3e10950d79d1003b0810f2e0dc2135eb9
SHA512 c5d071fc8cb68c5985e74ab7e90367e9261b291474689c37abd7f921716053e9d5e9446a45c5e91f3bb927589270e818e22e2d675acbe04e0627ecd5d532bc05
SSDEEP 768:Rp4LaQDlOrqquMwIMyv4Et8rvJLgmTGXs1bYMeNnnZl8n6KRD:RYK8rymTGs1b0xncn6KR
TLSH
T1E3F2769928095B7AE533C372A37AF101FE72517B06C28119749CD0903FBE46A877EBE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tk.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\tk.tcl
Size 23KB
SHA256 b7fd24177b17f67da2ca671f711309c65cf246be1fd0cf4f1ab8f3ea9ca2c3f1
MD5 7e46d32c3e70dbf17663f57e17d18dfe
SHA1 394dd3cde6a7e41855917060f4388478a0a84668
SHA512 6125e9b6c213e48e4a7a47acc0be3b930ddd9aca2132817f1906a2453e0d0b8292e7b2090bab8712856d12d2cf4d119238f16fae0fb57dd66da4db8fb3d92b0d
SSDEEP 384:Nbyxt+WaB9USY15gSgC3DbTbXLXKr3aIIXyDAbK2LMGgtewT+3oFQRyH5bAy59HU:NbItNe9USZbeXysm7GgteoFQRYMESL
TLSH
T11DB2D5195DC062B3513BC12F53BB2A00D87558FB2B76A84978DC48B93F6483B06FE9E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

altTheme.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\altTheme.tcl
Size 4KB
SHA256 3ecfc60d1311804096f524c6d60df65c48d2e78ed9eca47f2b927e0ee4bc92fe
MD5 786e6d93713052a65290b2bbb2ae3427
SHA1 f551e49f35bb3e061ca8ab4ad584cce005c0af65
SHA512 6bae5bb195438a5e380b50fa24a0e5cec3a622a7c9ee31ec7a6fc5f6e853a6c45f3be54a6045a2b228b51ead01bc28934b0cfc47283e71648bf656f5fb72a56d
SSDEEP 96:UWdsnBn/42HUyapZyUxwNj1ypydYzAky1Wq:bYB/420yuyFj1yjs
TLSH
T1D8A1AE22DE8E155B3D32196ACCB6824CEE31C6220B5F2F69F27F947C27791529053D3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

button.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\button.tcl
Size 2KB
SHA256 e38a9d1f437981aa6bf0bdd074d57b769a4140c0f7d9aff51743fe4ecc6dfddf
MD5 d4bf1af5dcdd85e3bd11dbf52eb2c146
SHA1 b1691578041319e671d31473a1dd404855d2038b
SHA512 25834b4b231f4ff1a88eef67e1a102d1d0546ec3b0d46856258a6be6bbc4b381389c28e2eb60a01ff895df24d6450cd16ca449c71f82ba53ba438a4867a47dcd
TLSH
T132512FE2414533796FA26A26C50FC0B0FF06C4FA92A6B4D1350D8ADC07E7A6945BE7C7
MD5 SHA1 SHA512 TLSH

Submit Download

clamTheme.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\clamTheme.tcl
Size 5KB
SHA256 bd0c56233d5c1c5e3b5c5aa3fc849f6eb43666f441bcc8033d80324cfde5c4c7
MD5 cf767355613964263bca0646c13bdbf9
SHA1 ca34c4c66dba97a861a1c48bc9bab24b2a3e8c6d
SHA512 6bf5ff39681364b107e46ec8d4ef78dbd64c5249c8282131035da17f4e4fb1720d49b0f281e008f2578b2a710578af700aa4780f7f0e9baaa2c6ca0034b229f4
SSDEEP 48:jrS4se/XhW03cC7TbPp/uo9ZUb0WZaSoetCgV+tMWZ3xT3xgNBw76FAu2ExVYu2j:/S4sSZWUFFGkhiI3xT3xd6BlrM9t
TLSH
T128C15D22DF8A18973D27266B8CB5825CDE35C1324F4B3B96F1BE943C676A1424093D37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classicTheme.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\classicTheme.tcl
Size 4KB
SHA256 f684be4c4b09288888e847415f8ae0e0f4aad985edfbe40b768a7dfc6efaf40f
MD5 92513a4a16443d7e1bd733326b98dfb7
SHA1 52caa51446cac06e12cb6848df159a86490c8bd9
SHA512 d31800fb006f20bf4ca95a6e61f8044d1dab6b5aa293db92816ecf24c77fced917b8211e5d6c9fbfa2ced2227a2671b51736afd0695fd3eeb469641b52047ef1
SSDEEP 48:zcJZjdrWs+Wg4ULsMFxPjtnvnuSuqoSsIxiFgGq8oFgGHxET1TXFrGTtu5dxKVS3:zcJZZWs44UosjtuSuEtMpjs/2ErY
TLSH
T1B491B0139A8B19573E321A7A8CBA834CED3495320B5B2FA9F27B503C36791505057E7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

combobox.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\combobox.tcl
Size 12KB
SHA256 2c254e4a56910fa398966196de101c1f57bbd06fd30957681b54f3895435ae97
MD5 8ac16c6d2d72503f9d08d04ad1ea41e4
SHA1 c13a083c433d61af6233e5fa73069fee6d484abd
SHA512 bc55f87261b0a83aafddb4f25baca7061e5219f3550c6e2d623797b5a10b36d21c26f8c1a85d1b34c661c7defbf8c06759d28e6528ef8d4a4069b4957e5831e2
SSDEEP 192:otLzBJ9SfinaXUBLPYXlk7fKiLH+AzIoCdJwGknmyLsxoVEQGITse8g5sarkT32e:wB5aXmLPYXmrKuLL7A
TLSH
T1CD4273656112207258F1C223A9FA42A4EEB742F63707D0ACB86DC5ED3FF0164C65B6DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cursors.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\cursors.tcl
Size 4KB
SHA256 5b33f32b0139663347d6cf70a5a838f8e4554e0e881e97c8478b77733162ea73
MD5 1a799fe3754307a5aade98c367e2f5d7
SHA1 c64be4b77f0d298610f4ee20fcebbaee3c8b5f22
SHA512 89f367f9a59730bcdfc5abde0e35a10b72a1f19c68a768ba4524c938ef5c5caf094c1bfa8fc74173f65201f6617544223c2143252a9f691ee9aaa7543315179f
SSDEEP 96:DRYEqfLDxGmxGUetobPT6t6brv0q3O4Uxz0:DWEqTDbxdKobPqe5PUxw
TLSH
T139A1651F358B10A77F71016699F6D44BEA06F377CA2AC108F58F495C7FB8281049197A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

defaults.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\defaults.tcl
Size 4KB
SHA256 b0a7d46c554e6dd8a27d379459c073587e3283edd395e9610fc1ee0ca5bcf0b6
MD5 f03545a9df677ba106da6a0559f24a00
SHA1 7ecd48474df68069e69437e4a4e02a02b4793f90
SHA512 44e3b575691d702fb9ef5633072c76582266135152fa4068dff46c6ad934a85f5afcdae279060c0d04d671b681f0697d19512d4c63715aa84b73ea54a40bcc5a
SSDEEP 96:lNl3u3lC2Uk0uMGN3xbVJU+N3xbVJhRJOJoHJOqyaxagyUxlBCeypatUTtY:zl3KU39GN3NVC+N3NVjRJPpLyoyabysR
TLSH
T110A1D022DA8E29573D72267BCCB6C24DEA34D1310B8F2BA5F2BA903C267E1405157D37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

entry.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\entry.tcl
Size 17KB
SHA256 f2cacb1b3a941cc7079627644e91f0d4729bf820c481c8ce7fa28c952b803e4d
MD5 dbcedd7bfb63a55c210c25dcf230c657
SHA1 b05cf01453a22016995627176f6339068c58ba01
SHA512 7f8e9a7d80b463d9cec791ef59b1a27f8acec95ceede45eca06c4dbf9ba805c2c1aee19a0118709ee47768f1b735a74a32b35fb9d8559d94da77c71e4ec5d117
SSDEEP 384:sca9Jzcyzf6yzQO+e+iPT3vKof8q3YIuR13a:sT9Jzcy76diV3YNa
TLSH
T1A48294E726121771A5F30733EEDBA045FE1A98BB378281153449A3543FF4111469FAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fonts.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\fonts.tcl
Size 5KB
SHA256 6574067a91858506460ac44ddf8cf9270e81d67b2feff2a43b4d5f774568a5ec
MD5 8514cf728a5782e457c50d7c61740ce5
SHA1 ede61c428d1865f10ae093d5c4bef29c0ec7e8ce
SHA512 2e24f15887193ffb884ab6af9ecf619ef913e3f6c6dfb0fc980bfb59a57ffec56b68dd36935a2998fbc66d12ef40a58dc3b3f278ec0e21d84dffead6a80c4c96
SSDEEP 96:NzEh94ntnVU8Z/1LkAIW22SeLMQR8hzcksejmOF4ytZm:Sh9ahV3ZWAIWDfktm
TLSH
T1CCC13347214EF0233AA11503F3A599126D357A682DA7F51838BF9E1C3FD3A174462BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

menubutton.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\menubutton.tcl
Size 6KB
SHA256 0935fb97b6628f055baeb2e2babbf2a6c8905260e1107972b0e7a1df0752e180
MD5 aec91dd23de04196af5eb31e8bbd0946
SHA1 bdf5a5a42a147d7484e5a2966ea949fa68f52348
SHA512 6ea4a2ec378e6cbabbf8ff20fb1cad0c68a90e5089f20d195fef2ee4ff9259bd3b622378e7203bd238402140f7eab7e316b8a8f9c4b6c0d3d3acbe81f0a25ea4
SSDEEP 192:toMcJQkmcE6fNuLyiCzSLSRwgppdT3kXdpK3dSH2tOTjvAG:tRc6kFbcH2pyXz+E2y
TLSH
T1A1D1469127047326A532A37683FFA058ED2FD175774AE49C3446829877E142A0AFDAE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notebook.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\notebook.tcl
Size 5KB
SHA256 b1210147f9daf3068de3d28d4b18c04ecfa8c8574e3e0ad275c1d0d75e9a99b2
MD5 39aec76c4e7b810873545c6a137accf3
SHA1 165372dccdd018d980aa2167094a4e0fa82b65f1
SHA512 759436ca4462df6c217f1502d1350735004edd31472fdaa9860f3fd8fbc2f4978be2b5a57993c37b9dce4a8237840f50d620ba95c22900f658b29a2ac38a5218
SSDEEP 96:RErUhyi5JeUQBWdz6eP8ClK6/u6AsBmPNNiREUkheLY1EVL23sN2JJjQdD:6uyiyDQBP8Z6/u6AUREUsNEVq3y2jkdD
TLSH
T1B9C1639972059333A231C237EAFD7868EE570C634693519D344DD63977A0089C6BE3EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

panedwindow.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\panedwindow.tcl
Size 2KB
SHA256 edd27e92c29552415f57415eefbedf124532a965295de4a41dcad55297e42901
MD5 64fcd33145118049834c993588550a86
SHA1 7cbc9a58467df6039836812e937e94ec0e107a62
SHA512 13021da316e29b984503e3d8df3bcea30f139401cf342330d8e5c41118d2feac29ff28bb79f89cd68639853899c25c99a92dd31dfa4f29276ab72b43f0760e67
TLSH
T1F541CEB7AC0611C2EC71423A5E9E6353DD16E06B6647C0253515C4263FB4243AEDC8FB
MD5 SHA1 SHA512 TLSH

Submit Download

progress.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\progress.tcl
Size 1KB
SHA256 697cc0a75ae31fe9c2d85fb25dca0afa5d0df9c523a2dfad2e4a36893be75fba
MD5 dbf3bf0e8f04e9435e9561f740dfc700
SHA1 c7619a05a834efb901c57dcfec2c9e625f42428f
SHA512 d3b323dfb3eac4a78da2381405925c131a99c6806af6fd8041102162a44e48bf166982a4ae4aa142a14601736716f1a628d9587e292fa8e4842be984374cc192
TLSH
T1FC218E5DE91160086DB1C12F57E031E8F7485276762E523DBC93D09EFBB0655C429FC2
MD5 SHA1 SHA512 TLSH

Submit Download

scale.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\scale.tcl
Size 2KB
SHA256 b909add0b87fa8ee08fd731041907212a8a0939d37d2ff9b2f600cd67dabd4bb
MD5 f1c33cc2d47115bbecd2e7c2fcb631a7
SHA1 0123a961242ed8049b37c77c726db8dbd94c1023
SHA512 96587a8c3555da1d810010c10c516ce5ccab071557a3c8d9bd65c647c7d4ad0e35cbed0788f1d72bafac8c84c7e2703fc747f70d9c95f720745a1fc4a701c544
TLSH
T1EF518DE6CD97702CFD175235B916C042EF09A47736C7A866381F84E11BE89701BD5A94
MD5 SHA1 SHA512 TLSH

Submit Download

scrollbar.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\scrollbar.tcl
Size 3KB
SHA256 c223da92b7f5a7cb7f4f4da89cf94ecd472c6aad40bf2455bca7ab2409e459fc
MD5 36ef078c823f7604f14d5d6d0a3a301b
SHA1 3e60bbdd52e327a77e6bb06c6fc7be0eb62780ff
SHA512 ee80d338411ced4ec38167ad0a60fb4a04e69a124f3ee5e21e081beeeccea342e55e713b3bf7a776f27f80eb6c2f5a49979cc338a4f2d44b1b8cfc641074f91f
TLSH
T1866121A2050110F2ADFBB23ADD7A8205CF2181B7674BD0C5385D9E7D6BE46B10B9CDC5
MD5 SHA1 SHA512 TLSH

Submit Download

sizegrip.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\sizegrip.tcl
Size 2KB
SHA256 d50e9db6dce8c50e060d6d89a9d86605dd0bf3dda1862c303bfb367854290885
MD5 972ec64553af9b7b5537db344b84f585
SHA1 9fced54be2dda5d430c8f51f45c7d29e977327f9
SHA512 80f97bf34c22ffe5f7e21228de853346704931c4a3b31667eb3a831f686483936494bbdbe795869d946dc237df4dd1d6864fcd6bd5fdbb0a67f7d949b05eadc7
TLSH
T1D651DF67090271C4FD329A3EACADD245DE2702E762D1854C7449E2557FB10632EECEEB
MD5 SHA1 SHA512 TLSH

Submit Download

spinbox.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\spinbox.tcl
Size 4KB
SHA256 df286bb59f471aa1e19df39af0ef7aa84df9f04dc4a439a747dd8ba43c300150
MD5 9c2833faa9248f09bc2e6ab1ba326d59
SHA1 f13cf048fd706bbb1581dc80e33d1aad910d93e8
SHA512 5ff3be1e3d651c145950c3fc5b8c2e842211c937d1042173964383d4d59ecf5dd0ec39ff7771d029716f2d895f0b1a72591ef3bf7947fe64d4d6db5f0b8abffb
SSDEEP 96:1qg/+yrjqA/K5ytxm1J1Ve6J1yQLUAzz/S76hrwxGGe2F:N/+yr2Gk1J1Ve6fxUAzDS76hrwxs2F
TLSH
T16BA17269A5C1E369F916822BDBDA8340EE2508F3AAC68099781344407FF0F045A7EBD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

treeview.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\treeview.tcl
Size 9KB
SHA256 c88b60ffb0f72e095f6fc9786930add7f9ed049eabc713f889f9a7da516e188c
MD5 f705b3a292d02061da0abb4a8dd24077
SHA1 fd75c2250f6f66435444f7deef383c6397ed2368
SHA512 09817638dd3d3d5c57fa630c7edf2f19c3956c9bd264dbf07627fa14a03aecd22d5a5319806e49ef1030204fadef17c57ce8eae4378a319ad2093321d9151c8f
SSDEEP 96:FoTvMxHZZ1u2xj7+ZBHxjiXJv9IfwW+vr3UxjXEJDTF/MyLF3JcMzlsra2tYGa5P:mImAkRKYXMH59o4UbS30LWb
TLSH
T186221FAAA5816271DA767632FEF80166FC1271AB93C6C48D344DD4643FB006188FE9F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ttk.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\ttk.tcl
Size 5KB
SHA256 685398e8db93aebbabfed795e91a42a87aa0e2a2cf23bfcffd70fea085a7ad5e
MD5 4a81a6219cfc1b056471d07624ee3dbd
SHA1 0a8e6b4a38cdba6a325d8668fce3442217392e8a
SHA512 5917febd222b1ad14ca871c11817d875d1ff019256eace148af49ba24be8f8fcf75debc40c6ba54368585c711dd9e056054bfd4133ea672f27d34a3d712bad6e
SSDEEP 96:lfxukTy5jPTq8LIgF2diyNTNR6nkrpM9a4ijSSvNigyJ5612HtZG835MSvWOTRsp:BM+y5jrq8G/2nki9JijSSvNigyJ5612e
TLSH
T117B17739A70EC1555EF142324B788168EADF7AB113510C08F8BD81BD27351778EE9BE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utils.tcl

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tk_data\ttk\utils.tcl
Size 8KB
SHA256 b9b73e5bcd85c8fe00628332f0ab0c4a0ffbb59f7b4e9d6cdc92762a5bcd8d76
MD5 4070fde3f342eebf933e601593d9748c
SHA1 e31dfd6d1d29b4a040aa448a25f2161afdfb59ef
SHA512 43aaaeccc5819391be93d11c9b264592e429d0041716aa725efcf7c71ccb5c370ad1fea89acb3c294ce266895b8a398d24bad5aff74091c8349cd75ab4a4b02f
SSDEEP 192:e0ebpSp+IZdzTmpx8xzaHfwnK7LlJWQl8p7M+R5:rw0+impWxa/wKnlJHu
TLSH
T16D02B6622A05B2A71AF2D222E7E7E190FF17C4731B5390147D1D449C3FB0632C6A2DAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_tkinter.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_tkinter.pyd
Size 67KB
SHA256 a49520e94f19d025a6be6ac7bbb73a7b32442838c62b68c162d44f81d92838ec
MD5 aff2c94b67aad4ff89fa0f4d33f52099
SHA1 70905b724afe90e46c918a300b3a32e75c601532
SHA512 e1864cac5cc425b34246f4febe2cdf4eff33d40332cb90ed67fe8e92006668d3c77949c058ced52fe2dcc83d1efb276e212c104f80f2ff72d9fa1d0a187fd7eb
SSDEEP 1536:YoTKqNDDa/Tf3HrlU9oo6ptboIGDSeiy1Ni9SfIbHtnY:YoOjflPo6ptboIGDSeuTq
TLSH
T16C637D9BA764008ADE67D538C5739F43E6B9FA521910934F01A4D34A1F333E3A7BA714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_zstd.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\_zstd.pyd
Size 491KB
SHA256 262aea62a994920daf152a10bdc0ca83a8b1c0874e71db23734862431de182c6
MD5 035b0a033dd00dbe887556f4d4b852c3
SHA1 e86cf52d825f9b68177354c54edaa57e962012c3
SHA512 0b428aa10a9e977e07023918870368a9c00e0eb4ab4f7cf1e88950d4aebd2ba5774ebea9f3779d05e370bbe315da6634922834106077d511b710c6131d29dc65
SSDEEP 12288:KccWmYLKvveeFSeX0ro+Q2J5BCl9VNqdp:KccWJKvveeFSeX0roMZdp
TLSH
T143B48D43F29943EDE53BC4B8CF565A13FBB1780B1214965B9395CB993F07B309A6A308
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\base_library.zip
Size 1.3MB
SHA256 bd6e2ab7c0ae81df215b954782ec56cfd7144647677df96a5cd1b094d5ea7505
MD5 79ef67f846f8498386568388a9f10449
SHA1 4e3dd42bfab64ff0b89e858b9ea30673e5004625
SHA512 72544e89994e8dc46359bdea5ee673f69193c4f7ebec6a8dccd9cca1b28d83c82be7d94ab66217a908c01d6d014a26e707f98f88e254d32f16902407b103a6dd
SSDEEP 24576:WQeOdP2m2dfELeYeVRpsBzdFylbyuUFsQZV1:W/fYiR8d1uUFsw
TLSH
T148552BA1B9917967FEC9F37A35B75A0CA715C0109B10D303B4A88DAC6FDF260AE558CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\libffi-8.dll
Size 38KB
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
TLSH
T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python314.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\python314.dll
Size 6.5MB
SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
MD5 006b0746b5abaf438d1bc753261c6d2c
SHA1 8f34714617f376cfa6e7e2aedc1e2a73de8c8fd8
SHA512 1c156c3f542de0a27e16ca5b7d6bbd34f2059b380ce85dbcfd5ae3a64de473fd160baba45ca30ad85dfe45742fdcb42aa969cbbaab26a569e324d4e65fb6d621
SSDEEP 98304:xVyDBH+ULEfi0VOuZd+FAX/uv3HDMiEEQn0rt:xVyD1+ULW5VrZRxim0rt
TLSH
T136669D26737901A5D9BB8035C9034647DBB1BC00AB30D34B49A4B6DA3F733635BAEB95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tcl86t.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\tcl86t.dll
Size 1.8MB
SHA256 a308beae8555cff5ac2aff7eaf0aef40b5fe173f047e246dc49da9a4d3ef62f9
MD5 fa83a807131f3d4a6070eb884e682ad1
SHA1 226bf1cd0fc289034d9579c95ee0fe4df50cc6b8
SHA512 6e86f3725bb68af581e3e1b917c950f255e0f4348256fc02d8a560159cd225fe28303da2554c205636f2f82b9757072bf0c3460116bd7b09ef0bf01cc46125a2
SSDEEP 49152:D0W4UbmMRbf0TIWn5SDf/qxF+PJJHmkY7C4wJreAJGP:YBUqMR7i6x9T+P
TLSH
T1E6859F1BE76410ACD8ABD1BCC227E60BDFF1B559136066DB51A08B912F23FE1277A305
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msgcat-1.6.1.tm

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\tcl8\8.5\msgcat-1.6.1.tm
Size 34KB
SHA256 adca186be560f2236265f538d4cb6df1171bed91192118796988bb9c08a4bc7c
MD5 e102bf017d302c494c1dbd449b040053
SHA1 58b16b222f881271e09f7775c46817bbc4bed81e
SHA512 7001af784de0663bbf634842c12d833e447221a0fef05723373db3281d5bb9545c3c12103413137451730fba6207a1dc318b662aa4da6a72fe6944577c199da2
SSDEEP 768:m3SQ0CzasW/rHPG2yfkZ0Kbh91iQQLnq5MIVYB8mbgijsPIAtw4qvUm:4SQ0CzasWDHPG2yW0kJQ2imXmUij6njG
TLSH
T10EF2D614334741AB36B2526799F9A2A4CE3CE23F10AB959EB89A801C7731F5D43F74D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tk86t.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\tk86t.dll
Size 1.5MB
SHA256 20f4876506bce7f89e53570e64fd1dce30a64548326b45f372871c7019560df4
MD5 0da8eb1421517029c8d986519b0e5c63
SHA1 daa8395b9d691b5dfbdaa1f63256555a14010891
SHA512 f729f812901cc023111989d6e1eaa639d2ed2283bdb852c91abc283dee3d785295d3191f70f2ef535d268d454279a7ddd0339993f06be21b62d43d8ab27d70af
SSDEEP 49152:A76DXYkBMhchLNqaJvARxr9DrTwylL1y62BEqkEH0CF2MT2JTBKa8SERGezf5:VQchLNqaJvARxr9DrTwylL1y5BEq8JTW
TLSH
T16E755A06B2A0C198C66FA134C91796BAE7F17C05931057DB72A0BE697F73BD2673A304
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zlib1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI28722\zlib1.dll
Size 142KB
SHA256 1dd27f0411ebb31bd148a61589cee254410915f1e6c37aa3ffa52fac71a5426c
MD5 eb3af30a0981219d851e6506db106bc2
SHA1 fd7b1b01dc01a7f32bd51f9a31bf717f4d55d09c
SHA512 8f55f4a86b747b5570d0f539c95dc1677eeba52bcd01850e8d86998b3415b99c92566ad9ece0e46b50e0e3a7eed6a4fe09604ec295f36f9bebf6e8f407ace468
SSDEEP 3072:0vEO6FnGGVV1m4dkRR5Th2UgvGxbOUJCoV:0sVD+RrFgvi7J9
TLSH
T1C8E37D9BA6E228BDC67780B052E78776F932B8214B309DEF5148C7741B12E506B197FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir432_1819492876\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3420-1372-0x00007FFF73290000-0x00007FFF732B9000-memory.dmp

Download