Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://workupload.c...

windows11-21h2-x64

8

https://workupload.c...

windows11-ltsc_2024-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    901s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    06/08/2026, 17:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    https://workupload.com/file/msDtgbh6VgC
  • Sample260806-vmljasbb63
Score
8/10
discoverypersistenceransomware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Probable phishing domain 1 TTPs 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 60 IoCs
  • NTFS ADS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 60 IoCs
  • Suspicious use of AdjustPrivilegeToken 46 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://workupload.com/file/msDtgbh6VgC
    1⤵
    • Checks SCSI registry key(s)
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x254,0x7fff767ec188,0x7fff767ec194,0x7fff767ec1a0
      2⤵
        PID:4040
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,14246417002962419780,1382491974914163952,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:11
        2⤵
        • System Time Discovery
        PID:4076
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,7212467275399984756,132749508240158596,262144 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:2
        2⤵
          PID:4496
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,1284884497616588753,5669634866011167871,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=3068 /prefetch:13
          2⤵
            PID:3196
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,8446831779461156226,15129919458801751447,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
            2⤵
              PID:4912
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,16013131546513330914,15714347983617675522,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
              2⤵
                PID:2356
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,14566661264791850738,17403449956806465821,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
                2⤵
                  PID:3652
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4148,i,14416015326402797604,3659634697653182502,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:9
                  2⤵
                    PID:1628
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4152,i,14788127046774250098,6279825133968535868,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:1
                    2⤵
                      PID:1008
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4204,i,4050320642225046042,5621363140784318115,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=4644 /prefetch:9
                      2⤵
                        PID:4504
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,7425799287913051096,7003726845639699073,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=3896 /prefetch:14
                        2⤵
                          PID:4368
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,12150584198543768185,2218192081024323376,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:14
                          2⤵
                            PID:2476
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,951332435177099554,8259381313244880117,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
                            2⤵
                              PID:1100
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,951332435177099554,8259381313244880117,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
                              2⤵
                                PID:1812
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,11699988252258842729,4679493967730753355,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
                                2⤵
                                • Suspicious use of WriteProcessMemory
                                PID:796
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                  cookie_exporter.exe --cookie-json=1132
                                  3⤵
                                    PID:1636
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4208,i,8126568062785721294,15656301124052436817,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
                                  2⤵
                                    PID:3884
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6108,i,7461258295225213584,4287339159839097301,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:1
                                    2⤵
                                      PID:4384
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6440,i,8829636810767929214,10084827444420733781,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
                                      2⤵
                                        PID:1712
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=3536,i,4754697505478891326,10427158288254685003,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:1
                                        2⤵
                                          PID:2552
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=4772,i,5105259952210713139,5150388536561987121,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=4140 /prefetch:1
                                          2⤵
                                            PID:2516
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4780,i,7860514638143826706,10352277993964721582,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:14
                                            2⤵
                                              PID:1076
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6484,i,6222303325658170753,10956589561136227863,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
                                              2⤵
                                                PID:2948
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,16932649326862381712,10273821321911145267,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:14
                                                2⤵
                                                  PID:2868
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6832,i,14623083174682848306,224848560311113403,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:12
                                                  2⤵
                                                    PID:2136
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7300,i,14969852916541569426,2235018349985935096,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=7296 /prefetch:14
                                                    2⤵
                                                    • Modifies registry class
                                                    PID:240
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6540,i,13826923093103830307,5676204649141162330,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=7880 /prefetch:1
                                                    2⤵
                                                      PID:1716
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6512,i,1469315298806060965,9788714880833703280,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8048 /prefetch:1
                                                      2⤵
                                                        PID:2076
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7924,i,7848121570101701661,13271953551110716996,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8052 /prefetch:1
                                                        2⤵
                                                          PID:4320
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7948,i,18314175835335957817,11175402384857621622,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8064 /prefetch:1
                                                          2⤵
                                                            PID:4796
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7976,i,3024093628536390100,2368398330847451119,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8176 /prefetch:1
                                                            2⤵
                                                              PID:4520
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7964,i,15745136273379827270,12455385919705546828,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8076 /prefetch:1
                                                              2⤵
                                                                PID:2428
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9112,i,3361817478579123799,12948370087261554519,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=9152 /prefetch:14
                                                                2⤵
                                                                • NTFS ADS
                                                                PID:4716
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9056,i,8174933470726446974,1675675788526837688,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=9124 /prefetch:14
                                                                2⤵
                                                                  PID:2400
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8960,i,13680240193809016158,1067074771900034808,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=9148 /prefetch:1
                                                                  2⤵
                                                                    PID:416
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=6532,i,735306878913877904,3161075415191941480,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=9112 /prefetch:1
                                                                    2⤵
                                                                      PID:5596
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8832,i,3923537731558222017,11191958552727266134,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8812 /prefetch:1
                                                                      2⤵
                                                                        PID:5692
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8396,i,7637399178971043434,11146445630719421390,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8072 /prefetch:1
                                                                        2⤵
                                                                          PID:5792
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8208,i,13977419835331353198,13474181655293931495,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8116 /prefetch:1
                                                                          2⤵
                                                                            PID:5952
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7920,i,16126766065789478776,1885440307458053030,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8692 /prefetch:14
                                                                            2⤵
                                                                              PID:5528
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9352,i,18008671142975992370,868325352448629749,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=9224 /prefetch:14
                                                                              2⤵
                                                                                PID:5640
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9276,i,16101254049507621434,16783812768881522153,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:1
                                                                                2⤵
                                                                                  PID:3036
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=4004,i,12094002374281766535,3054591552194761846,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8980 /prefetch:1
                                                                                  2⤵
                                                                                    PID:3632
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8656,i,15472057015454844618,2282297221828157130,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8660 /prefetch:1
                                                                                    2⤵
                                                                                      PID:5052
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8632,i,15315099766067849600,2804346418279515594,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:1
                                                                                      2⤵
                                                                                        PID:4548
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=6440,i,13849065092263603528,53870859662518588,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:1
                                                                                        2⤵
                                                                                          PID:4360
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8624,i,9241820266867487843,9871348677907660426,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6680 /prefetch:1
                                                                                          2⤵
                                                                                            PID:5016
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=6728,i,9043510685140971998,8310479716511045045,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:1
                                                                                            2⤵
                                                                                              PID:4384
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=3628,i,8995703056924373652,13167566157914727397,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:1
                                                                                              2⤵
                                                                                                PID:2176
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8904,i,14317959670906783211,5801733713518396877,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:5204
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=3648,i,7849456610441559244,13553260201944727952,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:2428
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8888,i,4042580665183833071,7607042346514999655,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=9188 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:1716
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=6700,i,14921193318388631502,1896486228899291390,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=9688 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:1000
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=10152,i,9899051763048960387,890445635475383042,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:344
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=10412,i,10957265037381101394,10518488747064659588,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=10364 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:6080
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=10436,i,11436483496392404852,1716028102136373079,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=10512 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:5620
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10820,i,6317471252110948195,7213316158158079355,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=10972 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:5600
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10848,i,18409776029337725069,2165097375997538349,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=10988 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:5668
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=10860,i,8472418811446441855,2000357694618003856,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=11000 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:5664
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10872,i,4699731762974709456,11197041085702896163,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=11020 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:6132
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10836,i,1651020240788744145,12226401514724813450,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=10976 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:6128
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=10912,i,1377949701595051979,12080098905680436824,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=11120 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:544
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=10900,i,12812068899305754491,2000873377492760118,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=11100 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:3904
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=10888,i,10293748177103708241,12411803218295841417,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=11080 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:2112
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10884,i,10739019433074493473,3980107906464598896,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=11040 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:2124
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=10524,i,7385515809381290508,2097909689738057932,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=11060 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:3788
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=12428,i,11662427930495771339,14374267636718153720,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=12380 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:5268
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12580,i,3897774917351401616,17378802306574428600,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=12468 /prefetch:14
                                                                                                                                    2⤵
                                                                                                                                    • NTFS ADS
                                                                                                                                    PID:5272
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=11536,i,8976519826213904390,17779864594815417530,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=12124 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:5236
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=12756,i,16565841209992946951,16248863794067472668,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=12856 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:6836
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=10112,i,11520083452275242184,18098204903289803346,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=12148 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:6448
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=12832,i,3099197477210962403,4065722537745040552,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=12740 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:6612
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=9132,i,5337609214192456048,5769605883078249071,262144 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:10
                                                                                                                                            2⤵
                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                            PID:3200
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=10112,i,4437155855114972491,4104234743401138055,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=10036 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:5808
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=9416,i,12526163975038303116,4027009665240834121,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=9988 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:5960
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=8536,i,4423118968817935692,16398866299366512846,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=10024 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:5436
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=12756,i,10063633953366738143,15006686524610360546,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=9380 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:5520
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=10088,i,8787289352116202028,14343003415713352663,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=7836 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:6208
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=12776,i,6097679174270960264,17065943984805465019,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:6700
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=4780,i,10915548317626609541,5795054699510441329,2097152 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=12756 /prefetch:1
                                                                                                                                                        2⤵
                                                                                                                                                          PID:2556
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10420,i,17978925586727828361,11410404486937710832,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=3944 /prefetch:14
                                                                                                                                                          2⤵
                                                                                                                                                            PID:1028
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,17095619576652519601,1950862877932650514,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:14
                                                                                                                                                            2⤵
                                                                                                                                                              PID:6316
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,13382564126308672566,828680814398236330,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8996 /prefetch:14
                                                                                                                                                              2⤵
                                                                                                                                                                PID:6352
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8964,i,5501653828009381717,10502195312128870889,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=12708 /prefetch:14
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:4436
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8008,i,9575173771261598823,8837426650166016020,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=3940 /prefetch:14
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:6464
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9352,i,6767542077735047839,12290661527414950678,524288 --field-trial-handle=2732,i,11298081212824179578,2597060533680534233,262144 --variations-seed-version --mojo-platform-channel-handle=8444 /prefetch:14
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:1824
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                    1⤵
                                                                                                                                                                      PID:5012
                                                                                                                                                                    • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                                                      C:\Windows\system32\AUDIODG.EXE 0x00000000000004CC 0x00000000000004C0
                                                                                                                                                                      1⤵
                                                                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                      PID:3176
                                                                                                                                                                    • C:\Windows\System32\CredentialUIBroker.exe
                                                                                                                                                                      "C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
                                                                                                                                                                      1⤵
                                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                                      PID:1448
                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                      C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                                                                      1⤵
                                                                                                                                                                        PID:5216
                                                                                                                                                                      • C:\Windows\System32\CredentialUIBroker.exe
                                                                                                                                                                        "C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
                                                                                                                                                                        1⤵
                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                        PID:5492
                                                                                                                                                                      • C:\Windows\system32\sihost.exe
                                                                                                                                                                        sihost.exe
                                                                                                                                                                        1⤵
                                                                                                                                                                        • Suspicious use of FindShellTrayWindow
                                                                                                                                                                        PID:4880
                                                                                                                                                                        • C:\Windows\explorer.exe
                                                                                                                                                                          explorer.exe /LOADSAVEDWINDOWS
                                                                                                                                                                          2⤵
                                                                                                                                                                          • Boot or Logon Autostart Execution: Active Setup
                                                                                                                                                                          • Enumerates connected drives
                                                                                                                                                                          • Checks SCSI registry key(s)
                                                                                                                                                                          • Modifies registry class
                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                                                                                                          • Suspicious use of SendNotifyMessage
                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                          PID:6036
                                                                                                                                                                      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                        1⤵
                                                                                                                                                                        • Enumerates system info in registry
                                                                                                                                                                        • Modifies registry class
                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                        PID:6960
                                                                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                        1⤵
                                                                                                                                                                        • Modifies registry class
                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                        PID:6840

                                                                                                                                                                      Network

                                                                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                                                                            Replay Monitor

                                                                                                                                                                            Loading Replay Monitor...

                                                                                                                                                                            Downloads

                                                                                                                                                                            blocklist
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                                            • Size 105KB
                                                                                                                                                                            • SHA256 a0a93a3ff10ee7d63019a2d25a90570308126faed503d19752ad5b3be6739a96
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            settings.dat
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                            • Size 280B
                                                                                                                                                                            • SHA256 507c1c0577c9954af95d5d443eb06c45ae9fc5a43902c168a391b7ce9693e688
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            settings.dat
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                            • Size 280B
                                                                                                                                                                            • SHA256 7da5fd99a0ab66e77a1c7d418475484f3755ec6c2945de3295f2577e789df01a
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            settings.dat
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                            • Size 280B
                                                                                                                                                                            • SHA256 23823794b3b6267e9c083ddaf520ee01fa32d4516798865f1445a1abc4b04bbd
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            36a26f0a-b828-475f-a144-9c037910684b.tmp
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\36a26f0a-b828-475f-a144-9c037910684b.tmp
                                                                                                                                                                            • Size 70KB
                                                                                                                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            LOG.old
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                            • Size 6KB
                                                                                                                                                                            • SHA256 cf2504ebb3c41ae8fa3053092fbbbd613c6fe88080856b1b74ebf682d55f2b87
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            LOG.old
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                            • Size 6KB
                                                                                                                                                                            • SHA256 c5c051538023ceb3baf5c7a42751fcf8c4a6a5bd006bf71ce5e3acc7f7fe6b2f
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            BookmarkMergedSurfaceOrdering
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                            • Size 6B
                                                                                                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_000095
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                                                                                                                            • Size 99KB
                                                                                                                                                                            • SHA256 3e57e100d87a819f22eb8250b1e015d07a7e4e93c92425e901ba06d452510490
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000b9
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
                                                                                                                                                                            • Size 24KB
                                                                                                                                                                            • SHA256 2beefe7293101d64840c308506967e9e2a0b2a6c4500ccbb7871c1342f2894eb
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000bf
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
                                                                                                                                                                            • Size 37KB
                                                                                                                                                                            • SHA256 84186c94c202c6eaa8cdde14e8bcb82ae95f13413df2852b46bd013535425f4b
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000c0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
                                                                                                                                                                            • Size 66KB
                                                                                                                                                                            • SHA256 3d9a661f6ce5bfcfc9181c8fb5969675d19f16fc9010f34df7a989e6ffda1bb3
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000d1
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
                                                                                                                                                                            • Size 60KB
                                                                                                                                                                            • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000d2
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
                                                                                                                                                                            • Size 68KB
                                                                                                                                                                            • SHA256 9e4788840f43b463a51534f036f6bd9a36e5293bd6da8e4654b43e1d83714d81
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000d3
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
                                                                                                                                                                            • Size 63KB
                                                                                                                                                                            • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000d4
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
                                                                                                                                                                            • Size 19KB
                                                                                                                                                                            • SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000d7
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d7
                                                                                                                                                                            • Size 18KB
                                                                                                                                                                            • SHA256 0b0b6b9a609ad590b762f5387b6fe738f088f6de44958a2c18e83c4c77b2c293
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000d8
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d8
                                                                                                                                                                            • Size 27KB
                                                                                                                                                                            • SHA256 3dd1a9a0fdceb35df26278bf7ee0619589cdd528722728a4d477614acfb1ebc7
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000d9
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
                                                                                                                                                                            • Size 165KB
                                                                                                                                                                            • SHA256 e73d402af09dea2dcd54bc422daa2e10f61459a89cbb8974a0d0abefafa296c6
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000da
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
                                                                                                                                                                            • Size 2.4MB
                                                                                                                                                                            • SHA256 9145d7787cb53018e96c17a48b4e0f7dd0043efdd2a723c0b3efa8bbea038c16
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f_0000db
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000db
                                                                                                                                                                            • Size 31KB
                                                                                                                                                                            • SHA256 6c18d579fd87c3776be068b762cbc83fde3acb543d49eabd3ade842eb987e887
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            0a01d40283622824_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0a01d40283622824_0
                                                                                                                                                                            • Size 278B
                                                                                                                                                                            • SHA256 945eb98bb488d588b676a0ba83ef188a016caf414b4802004e253f42e85fa382
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            0f54957f594985c3_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0f54957f594985c3_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 e87fad556934a23ca22920a63d6b6edfef9a5872ddbcb33568dc5984f97bd0a4
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            11104fe27cea1141_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\11104fe27cea1141_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 cc310b81941a58526fb6befe811935e51f0446871a0b67211d483c1d005d44fd
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            1a1686b54dbad744_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1a1686b54dbad744_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 06f83aaecbf8df238d55937d86f903ded548b9c6a015e7ad444845c030a1f6e8
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            1e4d944d702dea52_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1e4d944d702dea52_0
                                                                                                                                                                            • Size 269B
                                                                                                                                                                            • SHA256 c465a8e1388902cc4583790b3d91e595d868884072be215f2079a254ec563081
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            1f1c4bba1674fa36_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1f1c4bba1674fa36_0
                                                                                                                                                                            • Size 262B
                                                                                                                                                                            • SHA256 4aaaacb8123f38c93d40473da67aa9512fdc1dbaa3fdd8d953bc9f3d53fc8209
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            210f150f9bade78c_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\210f150f9bade78c_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 0dd084874781bb5622c2af71fabff4f583f7e40c413b17030291159b814339a1
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            28aa4150804fa129_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\28aa4150804fa129_0
                                                                                                                                                                            • Size 311B
                                                                                                                                                                            • SHA256 982aa353276bb97c69cb7b242391cf904f48b1676667bc7e5e3bee9ac03eb01b
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            29ac3d5c0e9e00ac_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\29ac3d5c0e9e00ac_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 0d5b8f92ac593967b8342db07bb140a9bb8deda9db59121ce709d793bf3399c7
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            2ed183d46af5954b_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2ed183d46af5954b_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 224ab1f4a1f9b844e71c31dd38bffc051aee5242fb12b819b30897b6072db786
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            2f301630c02886db_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2f301630c02886db_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 36d4edde7c42564fd210b97a17a94bc7e901b8a1687d11a1e917600b145118c3
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            39a5e623cac641bd_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\39a5e623cac641bd_0
                                                                                                                                                                            • Size 9KB
                                                                                                                                                                            • SHA256 bc8a8d660bb44285190dea5b7fef1204733c3fcb349bca36668ca0d3b45a974e
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            39ed1e10ebeb11b9_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\39ed1e10ebeb11b9_0
                                                                                                                                                                            • Size 262B
                                                                                                                                                                            • SHA256 bf8194a9771eb38510ddcc6ee4e0b03b52a980370ba40026bf811c468f59f361
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            3e5cfda9f482c6b3_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3e5cfda9f482c6b3_0
                                                                                                                                                                            • Size 30KB
                                                                                                                                                                            • SHA256 d74a7e5799c9a144fe11c7c1472e1b69cc77eec918f294f41f8820b7cdb0c23c
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            40d529f461117550_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\40d529f461117550_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 39e1f97cf53daa6493eb611ce1d0adf5204426e49daac83a3b5b3817bd002527
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            453e0cc520d39b1a_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\453e0cc520d39b1a_0
                                                                                                                                                                            • Size 27KB
                                                                                                                                                                            • SHA256 d5592fd71e82fe39ae1e0d02b0214258d59be369906db09e5657d278ae9bb947
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            462a41603665e19b_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\462a41603665e19b_0
                                                                                                                                                                            • Size 50KB
                                                                                                                                                                            • SHA256 d5cc9d4a5f36dfcdce2b28a32e14b4ee5f2a7c2c37123ce023ec949f4b923542
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            5419e86514e02389_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5419e86514e02389_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 2f833000865bb85b0560ec0ba0f89bc74b487cf5d4951c7fe3bb805a59c7ac8e
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            5a53f6a2eca06b5c_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a53f6a2eca06b5c_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 6c39e4c7bf5d1f4b00d337de488f5ef230ded8e9aabf8bdf8b998418187fb597
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            6048c53dd280a81c_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6048c53dd280a81c_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 a1dde4e37948b9265a99a247cdc01cb7da086baa3bffc8eee022748b877dbf66
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            690ccc8eea086670_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\690ccc8eea086670_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 5a8aaea5d83883a784bab0e38a968bbf3a6ee10650722207d5377c1bb4e96785
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            6d5ec87abf3643b1_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d5ec87abf3643b1_0
                                                                                                                                                                            • Size 5KB
                                                                                                                                                                            • SHA256 929848e28ee58000731473d68508968ef8694aa3fa61662a5a1621d1a39eb6f2
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            7306f02c0c4578db_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7306f02c0c4578db_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 f46628b0cdf3fda5a0a63226035fb00cadf73bd50d556c637d2ffc3eaa6a8c63
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            76e61c1c89c5ebe1_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\76e61c1c89c5ebe1_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 d37c456ca59f1cf34dc093cb1c4c4e821b5cf494b22be51433229fd4f5bbe3d3
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            7853c5422f7aa119_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7853c5422f7aa119_0
                                                                                                                                                                            • Size 3KB
                                                                                                                                                                            • SHA256 065b7538524ea0c87bbdb72010bd6a5af116eb3488309d4359a3685ce8b48ee0
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            78b99223269c8493_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\78b99223269c8493_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 35d1d3de5e00be36e7b58da31bb90d2e7d9b106ccff51dfeede4b935ba627314
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            7a1c51f0a7ce833c_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a1c51f0a7ce833c_0
                                                                                                                                                                            • Size 49KB
                                                                                                                                                                            • SHA256 b9b7736937c37ec6510ef0e5b7525f179d4a4c5b7da6d05726ee3f8c41c88608
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            7a6268d420b60dbf_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a6268d420b60dbf_0
                                                                                                                                                                            • Size 1006B
                                                                                                                                                                            • SHA256 f16fd6c50c1bc2d4b72085d5c249e14254777d4f038392eeef5a9643b501f682
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            8baa13f7b32fb253_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8baa13f7b32fb253_0
                                                                                                                                                                            • Size 4KB
                                                                                                                                                                            • SHA256 ecb137be97531e310524ee90b762b00cf35ebadbc14e4723fb512517a41afee0
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            8d66f2a73fddcb67_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8d66f2a73fddcb67_0
                                                                                                                                                                            • Size 5KB
                                                                                                                                                                            • SHA256 f6636770c8e08b87144fccf4cc0c80d7394ef8bf75f3f38bbc09a859fbfb4a48
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            903c20be12bf5915_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\903c20be12bf5915_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 e09554c6f64b3df0edf24fe48ef73bfbd5d7bd6d9b7e71ce079aedf5c744740b
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            92aa708729096273_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\92aa708729096273_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 5abd600bb8bf24894ee20216ed5411bc564eb99aa3a863e2c7f683cbc0234618
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            9791d9f6612cb38a_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9791d9f6612cb38a_0
                                                                                                                                                                            • Size 262B
                                                                                                                                                                            • SHA256 db69f5e09d922722d9c4bc22e61c1e676916821a5557ef4c4c0a8d1684925361
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            9820ef3cdc166065_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9820ef3cdc166065_0
                                                                                                                                                                            • Size 10KB
                                                                                                                                                                            • SHA256 ab3d98e643c7c3fc32fc3cade69ec63d692ac462af4a4d05f19b99d0ce937e15
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            9c5cd2ae8787ec91_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9c5cd2ae8787ec91_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 1025545b484097bfcc4a05c1e1639d50fa04a83bef8dfa952e2f8786ade98bff
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            a2c2b7678606fb5f_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a2c2b7678606fb5f_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 a2f2c5c966f786bae4809bc98f4775a104ce58155eb001eac4bcfad3af590ad3
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            a4d78697d978ffb1_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a4d78697d978ffb1_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 b91c563908e1114d32bf437c2b75f8055371481e26853a8b702e0bb4a72606bb
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            ac6d80c61349b248_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac6d80c61349b248_0
                                                                                                                                                                            • Size 249B
                                                                                                                                                                            • SHA256 0ea12b7a03efda859c0c038e838e023be8a45f9547c16d10dab516264027f6eb
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            b5901ac71d8cfbee_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b5901ac71d8cfbee_0
                                                                                                                                                                            • Size 3KB
                                                                                                                                                                            • SHA256 c1669016e274d63a3fd427105f808a4660510c0609890e7cbb2a8aa2bc08eac5
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            b6f377fe58b28a53_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b6f377fe58b28a53_0
                                                                                                                                                                            • Size 762KB
                                                                                                                                                                            • SHA256 f3fd52374f151e6c18de45ed2157a983097bf5b67f34ae983f2f45522f197782
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            b827c624dbf27111_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b827c624dbf27111_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 66266dd51d63741a3456852905d907e108394dcf0bdb970eeafdff4228c72a96
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            b9529d202c55dfdb_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b9529d202c55dfdb_0
                                                                                                                                                                            • Size 9KB
                                                                                                                                                                            • SHA256 8749236e05c3bae8c9b11a4d932f0a2dc2696aed9448a83d8a2e588917e3c56f
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            c6aa8e61aaa87dc0_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c6aa8e61aaa87dc0_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 e3cc833b0d8d90cb4e69ee5e375638342a54fad7a99f113666fe0866d446ac1c
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            c796a9a28320e412_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c796a9a28320e412_0
                                                                                                                                                                            • Size 9KB
                                                                                                                                                                            • SHA256 7c372f889f81cbe04f7700dea5bc317b0cd4512a6360d9f4bc6d08f44e4453f3
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            cbde122905d43173_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cbde122905d43173_0
                                                                                                                                                                            • Size 7KB
                                                                                                                                                                            • SHA256 9576420ccd0771144d3b658baf7d8f1bf52de65653395a84f47bf2b1eaf916f6
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            ce4d84248a465171_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ce4d84248a465171_0
                                                                                                                                                                            • Size 3KB
                                                                                                                                                                            • SHA256 cecc3400656e346bee6132b75844f6b7533792a7d40d3811e84aee0a937e6fd3
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            cee2586cd91cd2dc_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cee2586cd91cd2dc_0
                                                                                                                                                                            • Size 6KB
                                                                                                                                                                            • SHA256 eef9d92de2fbb5673fca2f3f09b61ea808fa85f2079f32c6b638e059492ca87f
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            d8d0d57d47c17e4a_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d8d0d57d47c17e4a_0
                                                                                                                                                                            • Size 9KB
                                                                                                                                                                            • SHA256 7324525894c2b78fb6e3b94da5f601a8a2fb2d4693c6ccbf3495f602c08e44c5
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            dc7b47f23bfbb5eb_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dc7b47f23bfbb5eb_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 7e6ecfe87725a10880c53043cd6e8807230d29c5474396d9d68e2dcab725a825
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            e0513585c34859ad_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e0513585c34859ad_0
                                                                                                                                                                            • Size 262B
                                                                                                                                                                            • SHA256 f7d76ca237acf6c947a7e53f9abf45efd30ec3e13bb38e0cbf8302d30f467fd0
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            e3a44bf920efba96_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e3a44bf920efba96_0
                                                                                                                                                                            • Size 13KB
                                                                                                                                                                            • SHA256 cdaf89d0af9dcba666cf6ea3e17f998ec49da6ae1b39906ad41afd0b6f8549a4
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            e93bf8a6b9ea2225_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e93bf8a6b9ea2225_0
                                                                                                                                                                            • Size 3KB
                                                                                                                                                                            • SHA256 da87166ae60d6451b15c8704a8ba997855098527824ef10198ce1c52c8ced1ac
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            e9c7e700cc3e33cf_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e9c7e700cc3e33cf_0
                                                                                                                                                                            • Size 262B
                                                                                                                                                                            • SHA256 3447098e0b8e5351b24fdbd660fcd4feedc2a0a6aff88ab0015cd07d39625829
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            f17e77031873dab7_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f17e77031873dab7_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 2b6825a8ac2d267a95ec92ddbb2afff5af46f29c4741fdc727c6aa9e265b8dca
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            fac04c66d8725008_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fac04c66d8725008_0
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 9a3571d9d242f688e62086335af99416421637d0655a1f3add31016e52686f69
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            fb260ac99d1c68e5_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fb260ac99d1c68e5_0
                                                                                                                                                                            • Size 7KB
                                                                                                                                                                            • SHA256 a0f251f67916228f75b078150d222bdade0b39bbeec059204206df6363e7b706
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            fc15564f196d27a8_0
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fc15564f196d27a8_0
                                                                                                                                                                            • Size 2KB
                                                                                                                                                                            • SHA256 b2adeb69334f85da34825a8e1cbd08bedc1a9d803e1e6631156352cb6e72fe8f
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                            • Size 9KB
                                                                                                                                                                            • SHA256 e814640e64b673e98de2b57ffcf6e22bbdf20f78a5cf0b5b1e97c6d95a9e1349
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                            • Size 3KB
                                                                                                                                                                            • SHA256 50058c91c232a752ed2fea38e0376e8886bea37b3a436a7c203a1ba98f5e1893
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index~RFe58ad42.TMP
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ad42.TMP
                                                                                                                                                                            • Size 3KB
                                                                                                                                                                            • SHA256 e0ea25ca3854f5562295de96a42c5bc8687c0a38ee1f5dbc7eabc266b34b0b95
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            SiteList-Enterprise.json
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                            • Size 2B
                                                                                                                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Network Persistent State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                            • Size 17KB
                                                                                                                                                                            • SHA256 f0441459be9afac03e0e50090aa9fb58819ab5bf9644f82bd937302eabe47595
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Network Persistent State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                            • Size 18KB
                                                                                                                                                                            • SHA256 bb6be29514099694eedca228c106af280c9b05d5fadf11c326d1672c27161a92
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Network Persistent State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                            • Size 17KB
                                                                                                                                                                            • SHA256 0e83f3de37459d1813e50323ffabb657f788e038597a51eccb5f6f6b59c2473f
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Network Persistent State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                            • Size 12KB
                                                                                                                                                                            • SHA256 e5a5a8c2870bb1e315d8fa137259c7adb7c6fef32c5af63d2e8e7d670fd7a455
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Network Persistent State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                            • Size 111B
                                                                                                                                                                            • SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Network Persistent State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                            • Size 111B
                                                                                                                                                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            SCT Auditing Pending Reports
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                            • Size 2B
                                                                                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Sdch Dictionaries
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                            • Size 211B
                                                                                                                                                                            • SHA256 192e8950f23f29af1eb2f9929344c3fc3788fb6eedaa9c4cca10bcf0838087f3
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Sdch Dictionaries
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                            • Size 211B
                                                                                                                                                                            • SHA256 8f6e3a3d5fa61c1dc305512423c778e8961b2563d6bffbbd9088990157caa951
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Sdch Dictionaries
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                            • Size 211B
                                                                                                                                                                            • SHA256 fbc919b2e0cc90a2a30240c9b2b1149172ca29790b39bcc1fcc95c64d84aa590
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Sdch Dictionaries
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                            • Size 211B
                                                                                                                                                                            • SHA256 8aac5becd1a0d8bc45f30e0690ee5db00484509ccc8d95ff5b68b7074abad276
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Sdch Dictionaries
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                            • Size 211B
                                                                                                                                                                            • SHA256 11440294904e062a1f63f5b7fb1aa4965afbd3251113b0ed16a695d56a9ad2d0
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Sdch Dictionaries~RFe5952ba.TMP
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5952ba.TMP
                                                                                                                                                                            • Size 40B
                                                                                                                                                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Preferences
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                            • Size 13KB
                                                                                                                                                                            • SHA256 19875ce5fc031dfa4c5066631f0a11ec4263e31b0ebfea80c10fd84551667fef
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Preferences
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                            • Size 20KB
                                                                                                                                                                            • SHA256 0663cceac73c0bf2c45636371bc2b286657fa2527f9b8035120e19985b1f1112
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Preferences
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                            • Size 14KB
                                                                                                                                                                            • SHA256 cbec8fe00ad3d14cede39761d01c7b3537d1253e7be621b4cd1ea02603a4634f
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Preferences
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                            • Size 16KB
                                                                                                                                                                            • SHA256 88b4c760cb6df38efa2b581c203b9652967519e4dee556cf2d8529b3f93053b4
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Preferences
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                            • Size 19KB
                                                                                                                                                                            • SHA256 3a3f3a19fdd78f45d064e6e0ab8b4af3dc98716e6db707cceffa3973e572113b
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Secure Preferences
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                            • Size 31KB
                                                                                                                                                                            • SHA256 1348c0d172f2ef4a794b539a3f4134153bcdfa03faa25ed12343ae4371bdf31f
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\83facec9-0843-46c0-8caf-89ceb43fda9f\index-dir\the-real-index
                                                                                                                                                                            • Size 3KB
                                                                                                                                                                            • SHA256 7a64ff999afded0fcae76afecefd352514ef32777fac3634fe3345967a5a1899
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\83facec9-0843-46c0-8caf-89ceb43fda9f\index-dir\the-real-index
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 8313454aa436ad557905014752feff15491b0fe417d011f71c1379c084ab5a0e
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index~RFe58dc32.TMP
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\83facec9-0843-46c0-8caf-89ceb43fda9f\index-dir\the-real-index~RFe58dc32.TMP
                                                                                                                                                                            • Size 1KB
                                                                                                                                                                            • SHA256 f47f1c27fe61fd740c3d2cbddce87cfb8f8ab2907cacffa0eaf7579c20ac9a00
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            index.txt
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                            • Size 371B
                                                                                                                                                                            • SHA256 2cd77e00fa8ab7930d9fae6ad9d7fad1f00e0cdae5f658a03d67544c888391f2
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\89bbee34-0d9b-427e-8c0a-e5df7a2ef6f1\index-dir\the-real-index
                                                                                                                                                                            • Size 72B
                                                                                                                                                                            • SHA256 d8af64242ced37bce791af7bcd31845005bc57a86f2ce2ffb7de1d2e75a12eae
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index~RFe5ad66c.TMP
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\89bbee34-0d9b-427e-8c0a-e5df7a2ef6f1\index-dir\the-real-index~RFe5ad66c.TMP
                                                                                                                                                                            • Size 48B
                                                                                                                                                                            • SHA256 1ee8998ae179aef163111f617bf51aa427f770d270fcac4f66cad769577a42fc
                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                            Submit Download

                                                                                                                                                                            index.txt
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\index.txt
                                                                                                                                                                            • Size 135B
                                                                                                                                                                            • SHA256 3c15dc044c17c7d27f1cb03a16d1948561684c7fd4cc3ace7249a832818b0903
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            index.txt~RFe5ad69b.TMP
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\dd2477233296e6ce7efbed21604890e73a49c53b\index.txt~RFe5ad69b.TMP
                                                                                                                                                                            • Size 141B
                                                                                                                                                                            • SHA256 e821054bf20f867ec44b9cd25f46b6b0b84f1f5777562d7f211568d232e36d08
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                            • Size 96B
                                                                                                                                                                            • SHA256 e8d417b3b06e63872dfeaeaf6fdd48e33dabf0b233388c82c954e583bd8ff6d8
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                            • Size 72B
                                                                                                                                                                            • SHA256 4aa3b5716edd4c6e1c33e1847384c5ca328dddbec97535b0d043c0da0e54058b
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            the-real-index~RFe597536.TMP
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe597536.TMP
                                                                                                                                                                            • Size 48B
                                                                                                                                                                            • SHA256 5860ae7e5846f5a19dd1871117088952bf0965045509533851f2237de083f8ab
                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                            Submit Download

                                                                                                                                                                            sync_diagnostic.log
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                            • Size 4KB
                                                                                                                                                                            • SHA256 5c233d26b3ab8da38455c3859d9cbdd9db5ea7a20ccf358c20fd1c5f143e7de6
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            bb1de546-40d0-4fb7-9d1a-ff5784fd0926.tmp
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bb1de546-40d0-4fb7-9d1a-ff5784fd0926.tmp
                                                                                                                                                                            • Size 22KB
                                                                                                                                                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Local State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                            • Size 19KB
                                                                                                                                                                            • SHA256 3b1d7849ab90a22ebdb1a1d314ba10ff09fc1a1c022f2057c8eb49a6fa6d670c
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Local State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                            • Size 20KB
                                                                                                                                                                            • SHA256 cf4edbe44065436ac00a3ef6846327fc30b5b8aaf5798d59183841df3e4b02d4
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Local State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                            • Size 20KB
                                                                                                                                                                            • SHA256 e86b77d11297f68dd7285cde9cd4b0e40cd9f1efca117c873b4eb161758ab331
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Local State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                            • Size 27KB
                                                                                                                                                                            • SHA256 42ea434e666f20c7a0ff252b05a5714171fd79917b7f06e41a7c8b851ec3cae0
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Local State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                            • Size 8KB
                                                                                                                                                                            • SHA256 060147130f651799cd50c5155c41f0e3289ee7a7756e5a7f962f639e6e741128
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Local State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                            • Size 8KB
                                                                                                                                                                            • SHA256 f8115b969bad1b42fc198b348647e3e6c82d9102c5fba5f9b92d9a510d6343ee
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            Local State
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                            • Size 20KB
                                                                                                                                                                            • SHA256 de54d12c7255d5e23e47178c9c7fa0030bfb57f1476e014a7bbe3b9710f6f859
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                            • Size 392B
                                                                                                                                                                            • SHA256 6c36e945bf0580f7522f39e74fd7775099ebd4c3cc9245b240751e204f8289fb
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                            • Size 392B
                                                                                                                                                                            • SHA256 5158de10959d43add89afcfd431f2b65426fd0db7e45d464aaad37b73a8c692a
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                            • Size 392B
                                                                                                                                                                            • SHA256 f5029d80da51593e3f0df6725e488594a35e7b54aed7bd13227094270545382f
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                            • Size 392B
                                                                                                                                                                            • SHA256 085c251eeec00bf222f1abe1cdab235cb7f6ea8c23694628b023212dba57e2ff
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                            • Size 392B
                                                                                                                                                                            • SHA256 c754d389dd3af8ace2369dffe16ac173ee23d888278c5331888f3630fc34f0cc
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                            • Size 392B
                                                                                                                                                                            • SHA256 2012f6be3742c43441c0f7ca3ee8a71e3465136dbe966e38ecd9ab6067aa5f46
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                            • Size 392B
                                                                                                                                                                            • SHA256 86d9b27fb0c602aec6afc987c03169dd2fa3bd11f9e674ebddb3dc283760abf6
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            RevisitationBloomfilter
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                            • Size 392B
                                                                                                                                                                            • SHA256 75a7b124c4dae30b9bf64d8548d98663bae8434f069b68779ab45c9ad158c729
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            RevisitationBloomfilter~RFe58d906.TMP
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58d906.TMP
                                                                                                                                                                            • Size 392B
                                                                                                                                                                            • SHA256 b261fcc35952b92028dfa319d7d4437bb889cfc9fb1c2a5a9926ad7df43a12de
                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                            Submit Download

                                                                                                                                                                            a8abbd3d-e9af-4eae-a2df-5764138eea2c.tmp
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a8abbd3d-e9af-4eae-a2df-5764138eea2c.tmp
                                                                                                                                                                            • Size 13B
                                                                                                                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                                                                            Submit Download

                                                                                                                                                                            ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                            • Size 8KB
                                                                                                                                                                            • SHA256 24e452ed77e68fd778a1f238bc75ae5a63ffb4b36f6c12fb64bb4116ccebd6e3
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                            • Size 11KB
                                                                                                                                                                            • SHA256 6ab8799002af24dde757480c077cc59127de97b4e1b6bf0fe8489fd5f18b0741
                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            media_images_grubyptok.jpg:Zone.Identifier
                                                                                                                                                                            • Path C:\Users\Admin\Downloads\media_images_grubyptok.jpg:Zone.Identifier
                                                                                                                                                                            • Size 114B
                                                                                                                                                                            • SHA256 e467c8c45d402c34f2e9c81d82001b1cf79c20b72e523d746ea3b971e5bd9422
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            media_images_imdage.png:Zone.Identifier
                                                                                                                                                                            • Path C:\Users\Admin\Downloads\media_images_imdage.png:Zone.Identifier
                                                                                                                                                                            • Size 127B
                                                                                                                                                                            • SHA256 e521ccae92c26eb09a2f0f5da087acbf281b3f3a30d57b8290313f9507880cc0
                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                            Submit Download

                                                                                                                                                                            memory/6960-2353-0x0000020948F70000-0x0000020948F90000-memory.dmp
                                                                                                                                                                            Download

                                                                                                                                                                            memory/6960-2437-0x0000020A6CAD0000-0x0000020A6CBD0000-memory.dmp
                                                                                                                                                                            Download

                                                                                                                                                                            memory/6960-2351-0x0000020A5A4E0000-0x0000020A5A500000-memory.dmp
                                                                                                                                                                            Download

                                                                                                                                                                            memory/6960-2299-0x0000020947570000-0x0000020947670000-memory.dmp
                                                                                                                                                                            Download