hxxp://jillonjourney[.]com

Resubmissions

28/07/2026, 10:45

260728-mth3ragk2w

28/07/2026, 10:42

260728-mrrbcagf863

Analysis

user interaction
yes
max time kernel
43s
max time network
48s
platform
windows10-2004_x64
resource
win10v2004-20260513-it
resource tags

arch:x64arch:x86image:win10v2004-20260513-itlocale:it-itos:windows10-2004-x64systemwindows
submitted
28/07/2026, 10:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://jillonjourney.com
Sample260728-mrrbcagf86

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3644	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297089454433020"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{1A2240A7-39C2-46D5-B6DE-048893E9F52F}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe
1036	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1036 wrote to memory of 3396	1036	msedge.exe	85
PID 1036 wrote to memory of 3644	1036	msedge.exe	86
PID 1036 wrote to memory of 4532	1036	msedge.exe	87
PID 1036 wrote to memory of 4532	1036	msedge.exe	87
PID 1036 wrote to memory of 4532	1036	msedge.exe	87
PID 1036 wrote to memory of 540	1036	msedge.exe	88
PID 1036 wrote to memory of 540	1036	msedge.exe	88
PID 1036 wrote to memory of 4896	1036	msedge.exe	90
PID 1036 wrote to memory of 1268	1036	msedge.exe	91
PID 1036 wrote to memory of 4896	1036	msedge.exe	90
PID 1036 wrote to memory of 4896	1036	msedge.exe	90
PID 1036 wrote to memory of 1268	1036	msedge.exe	91
PID 1036 wrote to memory of 1268	1036	msedge.exe	91
PID 1036 wrote to memory of 740	1036	msedge.exe	92
PID 1036 wrote to memory of 4256	1036	msedge.exe	93
PID 1036 wrote to memory of 740	1036	msedge.exe	92
PID 1036 wrote to memory of 740	1036	msedge.exe	92
PID 1036 wrote to memory of 4256	1036	msedge.exe	93
PID 1036 wrote to memory of 4256	1036	msedge.exe	93
PID 1036 wrote to memory of 3916	1036	msedge.exe	96
PID 1036 wrote to memory of 3916	1036	msedge.exe	96
PID 1036 wrote to memory of 3916	1036	msedge.exe	96
PID 1036 wrote to memory of 4516	1036	msedge.exe	98
PID 1036 wrote to memory of 4660	1036	msedge.exe	99
PID 1036 wrote to memory of 4516	1036	msedge.exe	98
PID 1036 wrote to memory of 4660	1036	msedge.exe	99
PID 1036 wrote to memory of 2168	1036	msedge.exe	101
PID 1036 wrote to memory of 2680	1036	msedge.exe	104
PID 1036 wrote to memory of 2680	1036	msedge.exe	104
PID 1036 wrote to memory of 2680	1036	msedge.exe	104
PID 1036 wrote to memory of 3976	1036	msedge.exe	105
PID 1036 wrote to memory of 3976	1036	msedge.exe	105
PID 1036 wrote to memory of 3976	1036	msedge.exe	105
PID 1036 wrote to memory of 3436	1036	msedge.exe	106
PID 1036 wrote to memory of 3436	1036	msedge.exe	106
PID 1036 wrote to memory of 3436	1036	msedge.exe	106
PID 1036 wrote to memory of 3940	1036	msedge.exe	107
PID 1036 wrote to memory of 3940	1036	msedge.exe	107
PID 1036 wrote to memory of 3940	1036	msedge.exe	107
PID 1036 wrote to memory of 1856	1036	msedge.exe	108
PID 1036 wrote to memory of 1856	1036	msedge.exe	108
PID 1036 wrote to memory of 1856	1036	msedge.exe	108
PID 1036 wrote to memory of 3268	1036	msedge.exe	109
PID 1036 wrote to memory of 3268	1036	msedge.exe	109
PID 1036 wrote to memory of 3268	1036	msedge.exe	109
PID 1036 wrote to memory of 3488	1036	msedge.exe	110
PID 1036 wrote to memory of 3488	1036	msedge.exe	110
PID 1036 wrote to memory of 3488	1036	msedge.exe	110
PID 1036 wrote to memory of 212	1036	msedge.exe	111
PID 1036 wrote to memory of 212	1036	msedge.exe	111
PID 1036 wrote to memory of 212	1036	msedge.exe	111
PID 1036 wrote to memory of 4980	1036	msedge.exe	112
PID 1036 wrote to memory of 4980	1036	msedge.exe	112
PID 1036 wrote to memory of 4980	1036	msedge.exe	112
PID 1036 wrote to memory of 3956	1036	msedge.exe	113
PID 1036 wrote to memory of 3956	1036	msedge.exe	113
PID 1036 wrote to memory of 3956	1036	msedge.exe	113
PID 1036 wrote to memory of 3760	1036	msedge.exe	114
PID 1036 wrote to memory of 3760	1036	msedge.exe	114
PID 1036 wrote to memory of 3760	1036	msedge.exe	114
PID 1036 wrote to memory of 2848	1036	msedge.exe	115
PID 1036 wrote to memory of 2848	1036	msedge.exe	115
PID 1036 wrote to memory of 2848	1036	msedge.exe	115
PID 1036 wrote to memory of 2756	1036	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://jillonjourney.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff9ab23c188,0x7ff9ab23c194,0x7ff9ab23c1a0
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=it --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,13111427578627160079,1214068998881313794,524288 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,16843304854374054284,14339367854484157454,262144 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=it --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,2356405974955860927,992967082840899916,524288 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=2476 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,17093285506063939268,73253738266212699,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,11440244038173809815,13265436952338028411,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4168,i,9426774573680783113,1493058195623028190,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,2511938447444850740,860041619979036898,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3584,i,5007891971535541243,5526213006282924776,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=it --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,17966003349479463991,14353462065521973316,524288 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=it --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,5340770590134436222,1741958306108525967,524288 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,10330207354283947681,13844840839222848361,524288 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=it --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,10330207354283947681,13844840839222848361,524288 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6300,i,11643751054590543533,3165724652832742529,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6444,i,5256550534658881285,12649778468669958799,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6544,i,14113967156124688241,15098875453117698265,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6552,i,5462144102745897843,17635272578731465893,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6844,i,362176405933054291,286442386216126847,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6980,i,14402440824171197187,3388405516339591293,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7124,i,17082009178583813579,2560282937060439117,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7132 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7272,i,4662853025038468161,8266909405483263374,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7288 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7424,i,16891937836502392234,9843436933087507455,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7436 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7652,i,14851488221593602463,3417397756331094397,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6968,i,2464977286976581190,8016372395644615453,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:1
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=8032,i,16933947305757191684,15407980964360900525,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=8156,i,8174088840135428608,1133070489329678871,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8172 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=8316,i,17185264146206846403,4169003450589836958,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8320 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8336,i,7087701823305174903,13172137742413164245,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8468 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8472,i,2359146829612353352,6918641427035890413,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8616 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8584,i,15299500005702640112,9542439715556510650,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8752 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8352,i,10754883883170812921,16020727122765683511,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8912 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=9028,i,15847960429661142451,13914115621757612363,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9040 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=9168,i,12953072087411761611,407446360619413748,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9184 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=9332,i,17643939367897133689,7242286359073333899,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9304 /prefetch:1
  2⤵
  PID:608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=9228,i,16962691300709651881,11296431210284014415,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9368 /prefetch:1
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=9376,i,1940102799564147339,13048916149608773398,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9400 /prefetch:1
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=9756,i,15539911381758468284,7861128319688230782,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9764 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=9904,i,3779617588172170972,7866497493063901128,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9916 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=10052,i,245674511654383956,3635063516318244139,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9920 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=10504,i,3595855298882130899,1206215500666692767,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10424 /prefetch:1
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=10712,i,16888517289969838837,4752169179114187225,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10680 /prefetch:1
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8472,i,9555704516696488576,770261912055319886,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9464 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=4880,i,4655663521542164676,5725504030281132955,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9892 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=10972,i,6481833067621173219,6247507135794583648,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10844 /prefetch:1
  2⤵
  PID:6188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=11168,i,8139619928201185815,136939529164521088,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=11124 /prefetch:1
  2⤵
  PID:6260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=11276,i,17438056361613856244,9455662482465837680,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=11268 /prefetch:1
  2⤵
  PID:6352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=11080,i,4512116397520228962,3032787696688116817,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=11408 /prefetch:1
  2⤵
  PID:6460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=3600,i,7002432581408595094,1802276258088346821,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10708 /prefetch:1
  2⤵
  PID:6688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=9276,i,14973301370172071161,15865247031516465191,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10448 /prefetch:1
  2⤵
  PID:6764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=9308,i,2760939369366859223,4498324235819179392,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:1
  2⤵
  PID:6640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=10548,i,13090884466780348429,15676782768259315461,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9112 /prefetch:1
  2⤵
  PID:6964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=10648,i,2305103933660260742,5079524138387530734,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:6984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9380,i,16159184961633466894,14930591595179824509,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=11336 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=7408,i,6851587322246515066,13233537519960752954,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10272 /prefetch:1
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=7596,i,8221030948682114860,11558055963244195759,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9056 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11544,i,10993957308262846918,17443363417386168958,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7332 /prefetch:1
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=7368,i,9072153249569019170,1906071154523894361,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7360 /prefetch:1
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=7220,i,11310576459670392692,5108807306148052766,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=9464,i,15238770959255589892,17380728658580757291,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7316 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=6788,i,17309780417735992276,17114092534776946014,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9880 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=6816,i,8002039633465280335,16033260560939790091,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7980 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=8304,i,1114381664276520929,6170312455371150297,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=7688,i,3077291821545306509,15214931361998683136,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7132 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=7696,i,5204671559670915846,3051892185801310935,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8624 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=7484,i,15656142531410596041,71268912393085715,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=7516,i,2406802756603783366,8024739835072788614,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=7508,i,9686857007940089494,1480496320494449686,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=11344 /prefetch:1
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=8868,i,14460232090968712441,4422127819096150457,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9700 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=8976,i,351418894945531808,16833922580854505847,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9708 /prefetch:1
  2⤵
  PID:6160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=10316,i,17868335475468403547,6150989645103317258,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8752 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=7432,i,10942798565510564254,5811630393073732679,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9760 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=10636,i,7668075573313177016,7054414549531551796,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8468 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=6248,i,17251261606537136769,4857114850409845615,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=5904,i,4744942733310866494,12816735882829377056,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:1
  2⤵
  PID:6920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,6307982437883451660,8097888344932928772,524288 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10424 /prefetch:8
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,14362321661835562067,18134504662615595097,524288 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10544 /prefetch:8
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=it --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10492,i,2822444179266416171,39460568953906456,524288 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=11168,i,13351423216963982176,12211882072965349125,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=7992,i,15080590640952469153,11159419354383385938,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7560 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=6500,i,2185578723204013920,16341888209861392206,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=7256,i,97745466651565282,17914503505653772731,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7776 /prefetch:1
  2⤵
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=11524,i,1649417520228005409,16823817140438080987,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:1
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=7976,i,7983947252446049892,10676083569840215439,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10648 /prefetch:1
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=9400,i,870415161454766824,8284929064543819548,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10904 /prefetch:1
  2⤵
  PID:6592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=6976,i,120769418226881837,15838686635341767398,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
  2⤵
  PID:6620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=11448,i,1949445910388953082,18231472748984578826,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8544 /prefetch:1
  2⤵
  PID:6740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=8956,i,10104927151007931488,10699447000444053476,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10644 /prefetch:1
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=10720,i,11981391599260070466,12652928691987058898,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10872 /prefetch:1
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=7140,i,13076335793029630046,11559876600656230346,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=9344,i,10121949839337633715,7949739232709061069,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7596 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=8816,i,14660266358939209649,3144229593953454150,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10764 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=9700,i,14885542924985431654,415994846829509061,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10136 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=4232,i,11040520481088817082,1575879903842360985,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10132 /prefetch:1
  2⤵
  PID:6208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=11188,i,17062559076401694318,1235873351626063320,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=11144 /prefetch:1
  2⤵
  PID:6188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=7568,i,4199828940450137575,15702197925064517805,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=8400 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=11004,i,3881689166628542595,10065217647459896275,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10976 /prefetch:1
  2⤵
  PID:6384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=6968,i,15802558048151125466,16163656626711022278,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=11108,i,3330280265537297354,11556352271192023712,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=5128,i,15508197309834920193,14574298723636181836,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=7588,i,12385481544324322935,7774263937588955751,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10172 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=8296,i,11307913901275110476,844033105412062667,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7688 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=6916,i,17985281056810906230,4864255284486117343,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=6556,i,8007744475211162799,11553827564201608090,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=10716,i,5176128684577357255,13460338967961166018,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=5848,i,15303159454122325039,18314377734647588847,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=9916 /prefetch:1
  2⤵
  PID:7060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=9936,i,12555975089229356158,18152938799540239309,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:1
  2⤵
  PID:6928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=11352,i,10266869956178025798,12835639122898387428,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=10020 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=9620,i,16027488272430047149,8440460350869887788,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=11420 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=11716,i,15499921061964349293,11497789373929517991,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=7572 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=11868,i,13037082589967991839,1365287369541378182,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=11864 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=it --js-flags=--ms-user-locale=it_IT --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=12280,i,14061887590619519821,15088033632100755594,2097152 --field-trial-handle=2256,i,8143997958671565563,17209146692433550244,262144 --variations-seed-version --mojo-platform-channel-handle=12004 /prefetch:1
  2⤵
  PID:4840

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1616

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 30KB
SHA256 d6a0654791f5790f341c6444dd02942b13b38c86af148f1d463305176354a186
MD5 2d20ff328601602ffe6a0383f07a57f6
SHA1 e8a06083277d75127321c2f2e05ccfd65ef8dc0d
SHA512 f3e0c8753f9ac8658ca10bfd350d42bdb86617a24753334e4fb2927384bf3f1299a906ad45bbaf4a4f5a306b86c112b5c36ddbe9406444fe74868a88c48369ff
SSDEEP 768:AKhI5mICK1xdIYSjyVkMTFkgQxBVcG7P66GCMudJ5PG1A:AKh6mIdjoy6yFkg4VP66GC9dJluA
TLSH
T19AE2F124566ECABEFBF9570C1A0B4353C292D250BDF5B29242866E3230CBDD766DD881
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 43KB
SHA256 3bab8a347bc1945960862893358a4a52df2ef2c57cfe1a98c2c6a4b76a30f2bd
MD5 b81fe7bc36adbde6ee89c7764e7f4781
SHA1 01ad3c9e479ec006193a3a6d2a32960910c5b3f8
SHA512 37913862a58fd582ad06d1a8109b98b4988b6b83b2a2b5075bec3d41a1453a8c0d14d3a436d785c005306d84c9a745e3909967f998a8736ffb5aa820a563ed33
SSDEEP 768:8g2tA6NIlNgmOblsil5aOxDuM16eb3cCIwpeuLeL1JC0z:8+6NuDeL5aOxDuMMBPKnLeL1tz
TLSH
T1A213018512C58034C7EEE4E1D768F689EA66B3000A45D3BDBC9FB6778310E7877592E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 86KB
SHA256 1caa95075d246675f7212590bd468e6db9b22e46492f745219d6519ce4e0d1a7
MD5 04e2203ddc983a5193ea112c9e5fbada
SHA1 e2cefb9bef70a167d910c1dfece0933c982e283d
SHA512 1d4f332ca3bd68ffee84011f0444c8327dcd7122a6b6634cebf2e073ba9e39544645905b5d8de0376dc61dafe34298e80ca679b5299fe0361e5351b87a19c6b1
SSDEEP 1536:Vr+95ql9DBbNi6oJs4DeV9pneMeDUxv9d0L45Nkhw/p4I:5+9UBbNQq4SEMeDUxT5
TLSH
T1908312EE8D4E29A4AD233EC1A2F029F4272C445D39E86E357B350AEC8552F71BDC451D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 22KB
SHA256 3747ee3a5ed9d940452710fbb86dbe6c8705141924e9deb39a3eb05cf6e772a9
MD5 3a94b37090a7d3273ba1d98f1f5e7098
SHA1 297182b704aea88fc28d04e709c2fc473a70e09d
SHA512 c392518165042b14390b19b9e8748dabed23f0b2a1d939f7db82d9bed5b808bdbd7610b0e101cad09c151511bb867ac13cd87b43c3bb44400dc587ce516c5e82
SSDEEP 384:XN+PFa3MjZNJZP1k7yz4dwmUEeNY9clh9nu3gZmDTEXrzdpgQyTYNo5ltFQXjuB:XNCqCZC7cDmolh9nuQRPdC2kQuB
TLSH
T118A2F10E0FE5A592E982701AFA70ADBA211CBC235BD75F21E242AF01692FCD4502D856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
Size 16KB
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7
SSDEEP 384:XQrDFyKFRXQQ5pGG913BahobGGOal+0HuXpAWBY:grxyUKQ53pdbGg47PY
TLSH
T11D72D0D62F2702F608F294202ECD392C679D7A25F77E6625F0659C860D58EB0D8F4F52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
Size 73KB
SHA256 6dbf4ce8bd7984da3b3dec2833e8107b11b10aa56a537a2e23284cc52a2d9ea9
MD5 86ab42d92e8aaa951eed274da507ad23
SHA1 311714e51063b0fa75cc3854c967f6a1d7ceaf10
SHA512 8272707b178435da9ec5a970dbfc34f76d6b0b0cfbdfa0fcc7c068507e0681318916ec3aecdd2f3227b153a5285bf1a4b9ab367ce2670223a925bee6e56ef655
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwpw3vidG7:mj1h9rIHApCReO9vWR+V317
TLSH
T1B17302C63DA8481B07FB429B47D08C556C2AB3A5CB7559446FB81C2CFEAA427132E58F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
Size 125KB
SHA256 4553be94e70aabec790b984573e46728ef55f1aa4ea8d4d5d2691ffd1011db60
MD5 c5df9ae98ba90e98458a35a2e9b6d372
SHA1 9ef2bb31eb6f10e5f7a9f95898b3a7e0202a6e8f
SHA512 0d62d470921bff75f9d6c74f550ce81560796f1d82cb9e45a40cf005d7352ae50c0fea338442b709db6d28fb98dd1bcc952c753e0d55d1d9283091c864885d18
SSDEEP 3072:DinP8Vb8bA3dM5bf4cbAcYwkyz1rGaCxoPHZ:gP8Vb80tuDxAukygHGP5
TLSH
T190C3128C7782741B69B69E44D96DB3C3BAAF4BC58C98A04C7215DE9CD5F2A20C036C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\00\00000000
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 486bc72c3a426deba5f4e33bd0c2b5f9ecab76fd7bcabc6d22d30e697a25aa3d
MD5 d1cf794b035cc3d0501f872dc9c1936a
SHA1 023641f256b2d104c0574d8b24a606f6d0a1dd80
SHA512 ae5f33584ed195737d7c1d86f09849b82f3dda628e40e55aee050552fee1bc5267304d515e4fb8ee976e9cb427836998e7529c15441ad32eecb651dca6e60a9e
SSDEEP 192:sxZd7LkmG/fGYss7VydNsIupIqHW6+WNXNK/YzhuxxIgUoJ:sxZd7gmG/fGYsa8rMPHbQ/rUM
TLSH
T1FD22B7566E38987B4CCBD209BA19BF53E6F6543191D41E48BBFC960C05E6ADD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 592c90ae39a713895f22091f55959e86dffe3ac7436cfe8a88e5ac0269df07b4
MD5 e191688a65b7f21b0664850ee063ab3d
SHA1 7fcfc5f5b43b6a4dafcbd376f544e32617517ae5
SHA512 72485ef76ed78452032bddaf80118e1c856edd289d691b783eca095b73c3b49023a324302f84bbad49690b5956c60129ff6e9be428b57075a2e83bdfadaef94d
SSDEEP 192:sxZd7LkmG/fGYsd7VyuNsIupILHW6+WNX1jXYzZuxxIg5HoJ:sxZd7gmG/fGYsl8CMeHbNXztM
TLSH
T19722C7566E38987B4CCBD209BA19BF53E6F9543291941E48BBFC960C04E6BDD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e63ec41e9d8ad6a00322f38ba2df664e9aed4e35057b82e995ded2d17449f722
MD5 bfedadcaaac262ef512c01c2336246f2
SHA1 8775448126c679f82ae7bf886b6b1c7c84983ef9
SHA512 72a8030766beeba4a779bec108a9a41f55f34c6ab5b4bb628fee28c897f4ceb69b6adeca42b2a750efd1ea392ffd75657796f673f1ccd2bef992b35e11b61341
SSDEEP 192:sxZh7LkmG/fGYsd7EyANsIup66GcDfHW6+WNX1jXYztaxxIg5JFJ:sxZh7gmG/fGYslnsMXHbNXxjv
TLSH
T18932C6526A3C987B4CCBE249BA15BF53E6F5142291D11E48BBFC860C05E6BDD230780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2eb045042b3a7e8493ffd54ba06bed8b4fe74340c616bead7362d067aa8d1719
MD5 f797a9aa8439625ba79c4f0b04765a73
SHA1 0246dc82173aa4ed0521e74809bc72e5ffe1ae18
SHA512 52c14cb8d09e81c29ae32e056271c15197975e8c1c7479b6eda1a6c46b51d3d810918a85290a0c6751296d9ca82a8b130777135982479dc818a0f966b1a09c56
SSDEEP 768:N3k7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBiroyMYUt:N3k7u70WvqiEau1jai5LA3B5WUt
TLSH
T161C2E93B744CCB7E4F801E9DEC566F973E9802C7A6948D4087FA994C02C77EA61264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0df40dd8ca67ba5e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\0df40dd8ca67ba5e_0
Size 406B
SHA256 1443466ec86fb3256af40f9ec177a4f03c95c1331a56fbad6da19a16b1105b86
MD5 733e2fb2bae15c68ebbf5ce73eb13006
SHA1 ac03f54a57b02ae2b7aeb591ab4430e642931b19
SHA512 5111ad343c80bfe3c55c9d3885380719ccbfd58bd2349f4edbd86783b4dc54a3b1ee4d33a35cb9c10ab1527d1a8c5bbb24458c197e9d0a22dd9b063f3441afb3
TLSH
T111E0F1873C1456B0DBD315FBEA1CC7496521C45A150A424F81C1C564A1D18B4F746505
MD5 SHA1 SHA512 TLSH

Submit Download

0df40dd8ca67ba5e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\0df40dd8ca67ba5e_0
Size 406B
SHA256 66e958767ada44d0b5bc0192f0c9d1d91a51223a2c3ba2d5196f2c76b93d88b4
MD5 ac04c14c60c38f3784919f23942d42d3
SHA1 49c9bdd766c9ad7c30f984ee4729f29d88ecb096
SHA512 81f8517e6370b57b55ac4d1eff441c68a6f728bd97f87bfc73b4385cf8fcb597c75f60ee2ab58bfab4cee6698944f1633e3f3735b503f9e125b9d95e144006cc
TLSH
T18EE0F1973C041570DBD315FBE91D87885622C469280E415F85C1C528A5C1478F78B401
MD5 SHA1 SHA512 TLSH

Submit Download

16d6ac7f85ab50d8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\16d6ac7f85ab50d8_0
Size 407B
SHA256 d7d759e0af0208019cc41d8e28eaf74468ff69a2ba4882e79cb2da4fa5bd9758
MD5 06ebf935ef508af3f0e9c48d8315045e
SHA1 6d6cbf4a7dde49b147d7fd8e033eda06cfa7c323
SHA512 dc43decd83d8d40ae9a7281f02776d7723b5f0366a2073d17d3563cd65c45f843200c7215e611e39c99c744584e090d6f7e372d759bba8f0805cd663ade4efcd
TLSH
T1ADE0F1933C040D60DF8328FBDE1D83D82032C0AE145501CE86C14520B6E24B9FBC2019
MD5 SHA1 SHA512 TLSH

Submit Download

9f9799edc3fe956f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\9f9799edc3fe956f_0
Size 407B
SHA256 2a3afede2e22b39e823d37cb44d6e82c4b837e2e63c61d7ff235a34777e39f52
MD5 1479dd4f9605b46982f0e080c2c3b28e
SHA1 a1d6b211d211c71006513eeae5f0230215e73c40
SHA512 bb2b146a3b77586ca585538b6e9be3cd9bfcc2656eeb107edbcc243765da020b288270249369170530329267c6b779f69cf677e574d4891dbd7ee68acccfb68c
TLSH
T121E0F1973D001DE0DEDA16F7DE289AC56521C07D5507434E87C09564E4C0874FB47105
MD5 SHA1 SHA512 TLSH

Submit Download

a0e1c94a8b11b702_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\a0e1c94a8b11b702_0
Size 384B
SHA256 6cfe092aa86d89fde56adadceb174d0e52b5052003bb2ffe313935a687970f7c
MD5 b54ad9a656284760b1e5b30fefdc9eac
SHA1 2997b20dd2d9a6a4cfcccf10ec663607eedeb381
SHA512 8fe73c677cd7d65b6ec11ea095ddf61efbfc0cf2ac7b85edc1aa4ad0ccec971e89cfc2f1009618f763e9e91a42dcd3efd08598ed5b0f9fc947e210b26242701a
TLSH
T140E0F8833C042A70DFD91AFBCF0882982022C86F200A930E60421068BBE04B5AB42209
MD5 SHA1 SHA512 TLSH

Submit Download

a0e1c94a8b11b702_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\a0e1c94a8b11b702_0
Size 384B
SHA256 a423d6f7de2822e02994a3614b8f04cb6a03de853e84c9e44dd935cb61d09003
MD5 afc5f3c9ef5ffe9bc3541fd27646243e
SHA1 6c6ac2eddfc9cc73bd24c2189a3683d2ad58807b
SHA512 660b3c145f4ae375d20e20f3598f3ebd8da0c68a38ef88ba78cf351064bb38a1012edf351f13aefd66b2d4792d41b7c056017d0c96a41c9c813b5f25ee013195
TLSH
T10DE0F8A33C083970CFC91AFBCE0882882032CC6A201A624E60421078B7E10B4AB8A008
MD5 SHA1 SHA512 TLSH

Submit Download

ba59ea02047e2f71_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\ba59ea02047e2f71_0
Size 378B
SHA256 fc1bc8026931c380bb0eaff746dbfed98aa67b2e98cad92a30d500b17d9c7f77
MD5 0f6f4fba1d275e0dc8896a0fade221c2
SHA1 06b32bd8e42d588356c54a56f34fff2dfc21e41a
SHA512 8714c18d2af448362b5cbfc3514ec792ab6e86c462bdf04df54553364ae2624dc8bf10e528c28c5c9671be3ddc97a216342e2a758739b6f2a3fef204e69d58b8
TLSH
T1E2E060433C0009A4DEC62DBBEE1CA3D86D21C999588801CF8181A554B5C1078F752004
MD5 SHA1 SHA512 TLSH

Submit Download

ba59ea02047e2f71_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\ba59ea02047e2f71_0
Size 378B
SHA256 dbd78a9774ddf2edec0f88f8f468cc98ed87115eb1e689b697ad03469a08aec6
MD5 5a26cac1223cbf82266a03d615614d92
SHA1 479fcff69d672b3be1a57a4f2af77861721a0381
SHA512 449a8c99cd9c88ebe1a1c7fe16270ef27344d4e9c984d210ceb2cf085651bc1938e52af952d7fe405bde60957471a560810ba7e7c3cc724039542c2e402f2f82
TLSH
T164E060837C000EF0DE8608BBFE1CA7C83D22C8DA5488018F82426114E5C24B8FB92008
MD5 SHA1 SHA512 TLSH

Submit Download

ba59ea02047e2f71_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\ba59ea02047e2f71_0
Size 378B
SHA256 9a87744f05fa1849f69b5ca94acdd93d880481d4ed5704ec3e1cb77469f4398f
MD5 c33575a0dfedf8a3a285ffb05aac623d
SHA1 2ce521ae6e008a6e0252c67e14658b37be78a87f
SHA512 52534f2ad3400dbcbd5b53035411373f4d5f6701fde89b8517644aa3019d30df9bb8e17b6251bf08f8c4526a592c2b3a215869456969d0ba4eea83863a0f6f6a
TLSH
T176E060537C0009B2DEC608BBEE2CE3C82D22C4AD6A88028F81019A18F0C1075FB92004
MD5 SHA1 SHA512 TLSH

Submit Download

f948769b9dbae713_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\f948769b9dbae713_0
Size 412B
SHA256 f408996edabbba3eea62eb1524879b2a547f51f8234ef6a8e37c50f437afeb68
MD5 a70d83b270f6bb826ac711e3876fe809
SHA1 86c9dee110004bd2f01a6b8c2277a5ca2f25c8e2
SHA512 8806f6ea822828d52559dd39b2a36bfe476a87752337d276d1dc03573bf1ace4d32201a60c455bb6c0c4d7dc98b8d35980f42976128f3ea3097ee800b2fbcf49
TLSH
T122E0F1EB7D0415A0DF5328FBDE1AC3C460B1C55E2109254D55C2D87865E0878A75B026
MD5 SHA1 SHA512 TLSH

Submit Download

f948769b9dbae713_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\f948769b9dbae713_0
Size 412B
SHA256 f74eabd06e560d94053e195b5259dd30a1bf0c03bb783ac4b787fe3dc16b6ad2
MD5 3685b13864bd0de518b2a331c083f8c6
SHA1 ee6a9b687c3b237561a6da507e9437f283705f7c
SHA512 ebdcd5a78b70cd4dfc39767c9db850cc8f959ee93f95caed179b910cd42c05cdda4dd7f3db6b25013a44bf73c5b9f2f48ed8553ede1eba22608aeb8d8d5f0b53
TLSH
T1F5E0F1EB7C4406A4DF531AFBDE1DD3885031C45E1105215D55C1D57865E1474A757419
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\index-dir\the-real-index
Size 96B
SHA256 03c996330d8fb728fabd668dbeaef4953956abb6fbc894503217e67ad8fb63c5
MD5 d3762a7e9c70242c16c1f6314ffdf289
SHA1 ab483d532d323dddba0b10506674eb52db82ddcb
SHA512 ffeb07cc7c3cbc05f997c54bd67aa130e2d8b9504319baf8624987199be87a2b88810bd208c05b6a821f2ad3b5f1e7b0b5de999b64195556e8cac228521320ea
TLSH
T183B0023245040047F64433B259F315DA37B58DD0C703A9C2509118F7F5F13995312044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\index-dir\the-real-index
Size 168B
SHA256 73f90cf0fecee00096ed25a2dd142df864bbabc6651043623d6f42ae5644663c
MD5 4be7c8cfea3f264546506d3200ee4175
SHA1 dda1cffe41d3dc5886e4bbbdee58af27c653ce2e
SHA512 38ee7523f05893ca35a279f853245ee9c75590e9ad8f17aa91a6f0e13f095f19ab58127bf2c217be271d32c8416fef8a75d01bb6c8ab06e8ce64f12364718b78
TLSH
T1BDC0125748810802EE08B3719CF322B1717F0C88EF05D75740C805D5F0722EB9239044
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\index-dir\the-real-index
Size 120B
SHA256 7492d1c6d53662a5291fa9fd5789ba734ffabac42f85a0d44c2d045b2ee487e0
MD5 07f3b2eec544db6f4f3a884925fc6676
SHA1 c90ac5fac3d780d3924dec6fd17ef09fc3f60e76
SHA512 46463b1b385eb274e5b9f6e8b13b468c4d78ceaf282819df27663cc2643e6acc9c417ef26ca42d3924867224e81d65cf9dc2f5ff2224c4f21d933d8495f048ff
TLSH
T13BB02401004005C7FD403374C4F107F135710C00FF054F4740C004D4D4113DD5303040
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588671.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\index-dir\the-real-index~RFe588671.TMP
Size 48B
SHA256 4fe4c936d36f825f00dac249d062f08579800be0d028f4980de966fdecacb514
MD5 69d7d76dd15a8a185947ce354872873f
SHA1 c55787b550afa72a018ec331928fca119159550b
SHA512 1547e78a63308e0395fabc0f1a6ff25ec7f485cdc2d54f11fd46f8c69af13ccd029e548e04cd5129ac2f129764913191bc0dd2196624d7a4c65216cf099feaf0
MD5 SHA1 SHA512

Submit Download

todelete_ba59ea02047e2f71_0_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1820db4c3be4bf46d41d9914fc7e30408ffecd7d\3afc6aef-571a-4b50-a156-6b19fdc02e4d\todelete_ba59ea02047e2f71_0_1
Size 378B
SHA256 52ccabbc32405395bc549bf34cb5bbdacc79724c39f3e8d8e9877e9c8d54daef
MD5 f8a91a7e10a318d40e62fa85e71ab3bb
SHA1 d7ec494471975da4ec1386742a9367c81ec3d147
SHA512 164025f905b6c8ff20039ce2581919f61028e3e8170f722ac032fca52770fb41ffbfc3396ac029fa471a080c84d2532b649f340b8f05731d1001f2406ce0b706
TLSH
T111E06043BC0019A0DE8608BBEF2CD3C86E21C8E96889028F82416614B5E20BAF756004
MD5 SHA1 SHA512 TLSH

Submit Download

52e16ce8428c5f02_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\52e16ce8428c5f02_0
Size 63KB
SHA256 7ebd3ec1929a2efb1101743342c5ce4fd3a97cda9b30ae848720a0188980a5a7
MD5 27ec07957436bca13e96a444c10efec7
SHA1 1a5bbbf1465bb3f306d84adbf8c7240def705d4c
SHA512 33c9c3a3b0b67d73c3b5788c8af3875baeda741c798c8e71ff81cde3b76d30d73816d1b377a31eecdb3b55ceddc498d6ae0ddf38a9c48939f065e2796688621a
SSDEEP 768:we1DiIGEUmiseEFfgoAaWhrJTt9/XoZ+UynxcYpKmjpcO87D74ZfskLTBVf3Gx22:SpEmtRXyynxcY+Z7/4RfdVf3W3ip
TLSH
T192536B96337174B3427BA1F1809F170B713AE197F404C9E8A194EEE54B54BAA0277FB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 01009888ac9fe6c668913fec03b027d8db98c2bd17f25714504fb287db335f3d
MD5 ac2d43c2a96033054532aefecad1a4b8
SHA1 79f128973066278290eedd2fd68f5adf52d0f05f
SHA512 73ba6348a0b8604a21241ce15be05de139353fb519ecdbfec087de05d2bda9e6103eac1665d40ce0353bb257f5df4aa6af2f75154481e8a45850609d2c0b6117
TLSH
T17DA0021843950147E55603B0F4C563C12318D8101A0113479095005CCC62A41C946046
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 95a1cf17bb5aa776f3f06a51dfaf03e0d60466210cdaf0b4e27b822bd020e1f3
MD5 af1bad963a6e14fdd389d6669f0f446e
SHA1 d086ba2ee614d5aac4ee104722981788020348d1
SHA512 7611558745a1fb032d9b4c806837399b845130e4b1e140f41c875732af3e619fb11d7554af87de6bed0a3d87c8800d41d170d45a36dd3d6f0805d9b583d7182c
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTfJItKKgA3yFPINKIMAsUIHKx7:KIbCKcfJqKKgaGP6KIM/UIKx7
TLSH
T1E5912307353E4601387F2948A666953B9E8372A33018E5AF7BBC65A10E27E121DFCCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 ca979fb6c942ded17ce9323d1d973e4b15b08ce3ff01154b815ee80386f970fc
MD5 585408813b8b5c8b88a97ae2bac892cc
SHA1 df4e3b5969074941fbb3d05c2a1b6d9d003ff245
SHA512 aa64f33d164bbae4272a56f5200358a34008c721217413880b1cc93024dfc7b05d4303ad622a5862de5f1053d32b417c73ce13685f9b0288ce15b58e96a2ebf3
SSDEEP 192:ucLsNfmQpWzOtBisBb+xNgQmiU1ExEXez4aGBPK/+FdG/mJZeYdNzqkU8:dsNfmsCOHbd9dfdAm9jU8
TLSH
T1B2321B756C78AC3B5EA2A145F0473A536EA44127D6843F94E7EC6B1C01DF7AC2306916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7f739830cf16edb900d5e232aadf62db7aa86d679e59990a02c0b0299cb504ec
MD5 119f95d5fe3df5f749c24d44944d4547
SHA1 78196b70f5fcc32f6cad5d5580906635d43f190e
SHA512 c4bab7e00d0750cee63a774da7ca3cc017425370f3db8d15f561c8d0e770746f21a4e2cd629c0026df634daa8a717b506ab9f5199d118e7114f307977cb14984
SSDEEP 384:7ZcIhsNf7sCOHbdUG2fdAm9jOObjI9G6w7NM:jhzHGGsBj29Mq
TLSH
T17E928E35AC789D7759A6F115F4863E171EF8C17BE7C82B84A6FDEB0C05AA5BC1301806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 125b84eca2bfd9f7b943f9de94ebb73c14b419031d9f6386d17bff64af69ce12
MD5 73a9916c673848ae875f98747cc4a829
SHA1 6ca92258eb3d851f9f2d14a11c40128312a8d373
SHA512 ee4cb05d592eef06aeb12bc590b45d2908d7831627ff2319cd3a33a3e1fb1b6e859bfd3d8bc0e385141ac2220b1da3879e725e4908858a563eb86498882928ba
SSDEEP 192:MONJ64BAQmiUyEE1ErW5GBPK/+FdG/mMaD8KU6:MONJ6eA80W0dAm9/U6
TLSH
T10F02FB355C796C7B9EB2AE45F4867B175FD8103BEA845F54EBE82B0C00D764C234282A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4df2b494e00a1f601af31fd181ae3454a163c039bf782b5cd30062c276d9c710
MD5 c174adea73d2b268a6888d30e353d8b5
SHA1 d883c5eaf0bdeb235a4629f6db96f880d0b8ad68
SHA512 3080e99a3d8bd45df4870f8bb6a1ddd06e839f862f6ba67f57aef209340e6065e09121ce1b6b02c928597a00f5f994e58f3a8795b8c66605e25e98b572fe2d55
SSDEEP 192:xONy64BrIQmiUyEKEres5GBPK/+FdG/mJZe5WwzqkU6:xONy6ekL/0dAm8jU6
TLSH
T191120B35AC78AC3B5D92B155F4873A131EA58127EB856F50E7EC2B1C05EF6AC2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5187fea22876c41f15aeb8af8f47d2df7fc01ed6543a37bdbfd2c0fc1d96859e
MD5 221427c964144a3bf837ff350be5aeaf
SHA1 785954d29ea9fe589e30c17d398568285bc5eb96
SHA512 8bd16552877c51dde1d56d9cd46778f84bdc77d057a2b13022051e361c6a49452884c4e3694d1649556141e3b19a9eab37643a7cb6b211c650a5b0dab71ee203
TLSH
T14EE00202530001BFD029133015E31B213AF7C02003F303464A2201791C633042E71F94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58cec5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58cec5.TMP
Size 392B
SHA256 8bcd6868bbc587030d736cc9b8f7f3593dbd33edec4d348e37ba94b5622fecb7
MD5 5fafa494bc4ad53e861f199592a92ae5
SHA1 3cd78aba2b5865d34eacf046131451d96b9c5062
SHA512 f5c66f83a327ee5fa1f0c83cb9f3f6e535fc9a3f5403743c533aff474dc3c383569caf22b72c050c4d38f108d4053827e8ec7c8fb3b60097ba7eb98c9eb4f0c8
TLSH
T1E3E002005300003FD02C133015E3172136B4C00003E30346411201741C523041A71E94
MD5 SHA1 SHA512 TLSH

Submit Download

4194974e-ada9-42d7-af59-5622497143d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4194974e-ada9-42d7-af59-5622497143d1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7aab8535ba4505b6cb54a4f663b1c3c4f6f9ceb30e166a3f057515bba15d6074
MD5 05281be1a148b5294069099c9a5a14e8
SHA1 60f78e978148e2996ed2c6d8787034b3d3e811a4
SHA512 021ff191702c9bc3ad140c6b9931c7ca346e259aa6962081e31ea4265059518764f8974df09f1004cb9f8ae7dfe79b2e4dd07611c7cb27f2257662a25e1a0f20
TLSH
T162412A68A6F91148B7777E066FF2A86D487EB8772F07D05E00010E8E0A72B40CDA1B37
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads