hxxp://ptoszek[.]pl/

Analysis

user interaction
yes
max time kernel
69s
max time network
874s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 17:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://ptoszek.pl/
Sample260816-v21a1ashrb

Score

6^/10

discovery persistence ransomware

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
464	discord.com
465	discord.com
477	discord.com
47	discord.com
48	discord.com
62	discord.com
390	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2572	msedge.exe
7116	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{D875EECC-E49C-4128-833D-7465F68DE1FF}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{5543764D-806E-4FE9-8F7D-6FCB753BF13C}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	5616	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5616	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe
2440	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2440 wrote to memory of 3412	2440	msedge.exe	89
PID 2440 wrote to memory of 3960	2440	msedge.exe	91
PID 2440 wrote to memory of 2572	2440	msedge.exe	90
PID 2440 wrote to memory of 3960	2440	msedge.exe	91
PID 2440 wrote to memory of 3960	2440	msedge.exe	91
PID 2440 wrote to memory of 1556	2440	msedge.exe	92
PID 2440 wrote to memory of 1556	2440	msedge.exe	92
PID 2440 wrote to memory of 2428	2440	msedge.exe	94
PID 2440 wrote to memory of 2428	2440	msedge.exe	94
PID 2440 wrote to memory of 2428	2440	msedge.exe	94
PID 2440 wrote to memory of 2496	2440	msedge.exe	95
PID 2440 wrote to memory of 2496	2440	msedge.exe	95
PID 2440 wrote to memory of 2496	2440	msedge.exe	95
PID 2440 wrote to memory of 3936	2440	msedge.exe	96
PID 2440 wrote to memory of 3936	2440	msedge.exe	96
PID 2440 wrote to memory of 3936	2440	msedge.exe	96
PID 2440 wrote to memory of 3144	2440	msedge.exe	97
PID 2440 wrote to memory of 3144	2440	msedge.exe	97
PID 2440 wrote to memory of 3144	2440	msedge.exe	97
PID 2440 wrote to memory of 1764	2440	msedge.exe	98
PID 2440 wrote to memory of 1764	2440	msedge.exe	98
PID 2440 wrote to memory of 1764	2440	msedge.exe	98
PID 2440 wrote to memory of 5268	2440	msedge.exe	100
PID 2440 wrote to memory of 5268	2440	msedge.exe	100
PID 2440 wrote to memory of 1488	2440	msedge.exe	101
PID 2440 wrote to memory of 1488	2440	msedge.exe	101
PID 2440 wrote to memory of 1572	2440	msedge.exe	102
PID 2440 wrote to memory of 1572	2440	msedge.exe	102
PID 2440 wrote to memory of 3248	2440	msedge.exe	103
PID 2440 wrote to memory of 2720	2440	msedge.exe	104
PID 2440 wrote to memory of 2836	2440	msedge.exe	105
PID 2440 wrote to memory of 3248	2440	msedge.exe	103
PID 2440 wrote to memory of 3248	2440	msedge.exe	103
PID 2440 wrote to memory of 2720	2440	msedge.exe	104
PID 2440 wrote to memory of 1504	2440	msedge.exe	107
PID 2440 wrote to memory of 4196	2440	msedge.exe	108
PID 2440 wrote to memory of 5544	2440	msedge.exe	110
PID 2440 wrote to memory of 1504	2440	msedge.exe	107
PID 2440 wrote to memory of 5340	2440	msedge.exe	109
PID 2440 wrote to memory of 1504	2440	msedge.exe	107
PID 2440 wrote to memory of 2384	2440	msedge.exe	111
PID 2440 wrote to memory of 4196	2440	msedge.exe	108
PID 2440 wrote to memory of 4196	2440	msedge.exe	108
PID 2440 wrote to memory of 5544	2440	msedge.exe	110
PID 2440 wrote to memory of 5544	2440	msedge.exe	110
PID 2440 wrote to memory of 5340	2440	msedge.exe	109
PID 2440 wrote to memory of 5340	2440	msedge.exe	109
PID 2440 wrote to memory of 2384	2440	msedge.exe	111
PID 2440 wrote to memory of 2384	2440	msedge.exe	111
PID 2440 wrote to memory of 2628	2440	msedge.exe	112
PID 2440 wrote to memory of 2628	2440	msedge.exe	112
PID 2440 wrote to memory of 2628	2440	msedge.exe	112
PID 2440 wrote to memory of 6132	2440	msedge.exe	113
PID 2440 wrote to memory of 6132	2440	msedge.exe	113
PID 2440 wrote to memory of 6132	2440	msedge.exe	113
PID 2440 wrote to memory of 5264	2440	msedge.exe	114
PID 2440 wrote to memory of 4112	2440	msedge.exe	115
PID 2440 wrote to memory of 4112	2440	msedge.exe	115
PID 2440 wrote to memory of 4112	2440	msedge.exe	115
PID 2440 wrote to memory of 2108	2440	msedge.exe	116
PID 2440 wrote to memory of 4616	2440	msedge.exe	118
PID 2440 wrote to memory of 4616	2440	msedge.exe	118
PID 2440 wrote to memory of 4616	2440	msedge.exe	118
PID 2440 wrote to memory of 6820	2440	msedge.exe	122

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://ptoszek.pl/
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc956dc188,0x7ffc956dc194,0x7ffc956dc1a0
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,4273745807375658637,6165004547690728503,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=3092 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,3836226579458576050,1828447755730571429,262144 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,15702280097267009328,3166718443206186680,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:13
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,4012876477094956265,17689933875761795300,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,5384851773335334335,9650565061391393756,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,85774605928560593,13193109988404669910,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,11917111681040377873,3347014723079562073,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:9
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5472,i,5423165201805344745,3879618964138261177,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,17438530055071118768,15485912433490371784,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:12
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,7567375074243264117,13065724926791374130,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:14
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,891262695797283059,7493451177788133622,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:14
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6704,i,8032879884135720766,1912229309864285562,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6696,i,16699483915256569051,11777645587890021837,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,16627145888737469352,16759857980862773618,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:14
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=7248,i,17998807896573661632,17345687558089341233,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7400 /prefetch:1
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7268,i,16652172541400607710,14480373106251416897,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7292,i,11168935763763712184,12721481161282932643,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7444 /prefetch:1
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7308,i,8002865129290870481,7855498936710670617,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7324,i,13983907272936457899,1316910600185944131,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7472 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7276,i,71515845584155090,15823317873033668308,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7440 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=8368,i,10499384157310008522,1250257878171236311,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=8408 /prefetch:1
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8644,i,14218800929372848577,11226012037517147363,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=8652 /prefetch:14
  2⤵
  - Modifies registry class
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=8876,i,7901608906402856956,761050010217935248,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=8884 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9016,i,7179659180178865101,13502892151692607787,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=8992 /prefetch:14
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=8584,i,11168329115054684566,13522346063178456640,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9320 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9644,i,4655292569266547123,17316633531777691269,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9688 /prefetch:14
  2⤵
  PID:6180
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9644,i,4655292569266547123,17316633531777691269,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9688 /prefetch:14
  2⤵
  PID:6820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3908,i,10234165463931758129,12833998747325323597,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:6856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6692,i,12920014260695196902,15335453422580057141,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:6864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8584,i,12561149428536953976,14762393485296411120,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:6872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8868,i,1485620024350743226,14664141962558733485,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:6880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=3892,i,7142511201722011116,14733386076204974956,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:6888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3896,i,7079914981277748354,9759799509000190657,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:14
  2⤵
  PID:6896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9492,i,5649062667578986725,1651735663359607538,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=10092 /prefetch:14
  2⤵
  PID:6904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=820,i,9723040724990909767,9054066957581483384,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=10120 /prefetch:14
  2⤵
  PID:6920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9944,i,15851528590995441913,6121226391307689148,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=10180 /prefetch:14
  2⤵
  PID:6928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=10236,i,5599876585622111192,18166327519534013935,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=3892 /prefetch:1
  2⤵
  PID:6796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9192,i,12932807125561681722,6759635921763900195,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:14
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7600,i,16169659819543169217,4262352722722043375,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7476 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=3728,i,10326580294631587189,11274862030197204514,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7560 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8488,i,205295960378148351,5292140008658687379,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:1
  2⤵
  PID:6272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=3772,i,1762562123919729654,15181446739340779052,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:7112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9452,i,14409748920312592123,16217457220227569149,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7612 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8008,i,13180457825466064372,12356727494716549986,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7864 /prefetch:1
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,8965739780673558474,7970159933816356536,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7824 /prefetch:14
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=6784,i,16446807344794556350,14027199012269623412,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7704 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,16468092161170038102,2356138718027575676,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9372 /prefetch:14
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=3864,i,7316800232025747751,6290745167675842578,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9352 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9756,i,12030413302209734927,12009720069826744956,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7648 /prefetch:14
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9780,i,7196540246195897521,15052816450060294492,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7624 /prefetch:1
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9080,i,3208794680080119253,4132578579317227820,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=8300 /prefetch:14
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10332,i,15790934466717358441,3406868276226818985,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9400 /prefetch:14
  2⤵
  PID:7064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8756,i,16184084313020222582,8806363323753114091,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=8316 /prefetch:1
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9260,i,1676254116943481034,10133522177040214250,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=10128 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9548,i,10722374810424593763,7214934940845136140,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=8396 /prefetch:1
  2⤵
  PID:6724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10024,i,17247781634075231960,427598260057312704,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=8196 /prefetch:14
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6740,i,14081987742480951776,5728387110592162054,65536 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:3
  2⤵
  PID:6296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10532,i,11890118592168322743,17554624717605920986,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=10328 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=7232,i,10199980971655834237,4424465775854685002,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=5520,i,11754206584889656867,17865511338706222547,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:1
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10532,i,10473090985802478271,11278027545257031638,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9384 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9908,i,16745754723148886292,11109521308192445910,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9860 /prefetch:14
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7400,i,10317704090881647240,12337489619262682139,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9972 /prefetch:14
  2⤵
  PID:6764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10004,i,5385323440322215025,10639026495953027030,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9988 /prefetch:14
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=10036,i,2897773145439962406,12747240430360192479,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=9980 /prefetch:1
  2⤵
  PID:6584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9180,i,11573499472711759786,9723814476185089540,524288 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=8048 /prefetch:14
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=8212,i,11698063220875848737,12595091982842602750,2097152 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,13691742928282431676,16809880159307560348,65536 --field-trial-handle=2452,i,2123278467543396655,7491863049723280790,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:3
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  PID:6280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffc956dc188,0x7ffc956dc194,0x7ffc956dc1a0
    3⤵
    PID:4816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,3911430401701741655,956408906765798496,262144 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
    3⤵
    PID:3144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,8794773025010912965,17036657954940887065,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:11
    3⤵
    - System Time Discovery
    PID:7116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,1890591920805043187,12663994699827897728,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:13
    3⤵
    PID:3036
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,6038638817708002100,16098714764557804075,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:14
    3⤵
    PID:6644
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,6038638817708002100,16098714764557804075,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:14
    3⤵
    PID:5924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4616,i,9866752011895333232,14960937436742038392,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:14
    3⤵
    PID:6380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5128,i,1927395841731301372,4168898514900886811,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:1
    3⤵
    PID:2560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5132,i,2103045859335651358,7346916392951727507,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:1
    3⤵
    PID:2444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,5245700904619041829,1136919094552359622,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
    3⤵
    PID:1544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,4808812450268853568,10949577144895137564,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:14
    3⤵
    PID:5704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,13975771646242026584,7387540071709664899,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:14
    3⤵
    PID:4560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,10054868428462019951,6616602374359169855,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:14
    3⤵
    PID:1440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,13663040122390573334,9440608131782364705,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:14
    3⤵
    PID:6108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6660,i,1865403198662277374,14485914825505627661,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:14
    3⤵
    PID:6236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6704,i,6243815459089592915,10332822972738676758,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:14
    3⤵
    PID:6848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6720,i,4290364008487596993,3260949509900865621,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:14
    3⤵
    PID:6684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6884,i,13273029790413533308,3826715006627423652,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:14
    3⤵
    PID:2652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6824,i,10555077735734709679,1805698998462851930,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:1
    3⤵
    PID:4388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,1860412220614472353,5309940740063589901,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:12
    3⤵
    PID:3064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4460,i,6821906165012883391,11675062605937185206,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:1
    3⤵
    PID:6484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,5295695175716040840,5355639258593431307,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:14
    3⤵
    PID:1420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7192,i,342553780899048240,583761281885019236,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=7912 /prefetch:14
    3⤵
    PID:5944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8080,i,12085777521795363295,5947997414500831435,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8100 /prefetch:14
    3⤵
    PID:1428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8188,i,14177975354992462456,4709173673298814620,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8316 /prefetch:1
    3⤵
    PID:7160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8176,i,5298471975818690018,16166593808182098090,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8320 /prefetch:1
    3⤵
    PID:948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8200,i,3138455284430920977,5437712663680381337,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8324 /prefetch:1
    3⤵
    PID:1264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8212,i,8585232939378815147,9395986067039989411,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8336 /prefetch:1
    3⤵
    PID:7024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8224,i,1145199794137031694,4389939347516677257,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8348 /prefetch:1
    3⤵
    PID:6444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8236,i,1520424697652665872,12228806352104547421,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8368 /prefetch:1
    3⤵
    PID:7156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=9184,i,6276231784361978275,5379822509734698818,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=9304 /prefetch:1
    3⤵
    PID:1060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9380,i,2072853614827457617,5429730933526865851,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=9192 /prefetch:14
    3⤵
    PID:6640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9472,i,3721393064631621445,2525966300667760623,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=9516 /prefetch:14
    3⤵
    PID:5496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9708,i,9635448966614488154,9471452990717862893,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=7716 /prefetch:1
    3⤵
    PID:3208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,17717364290992408091,5664529938136052488,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:14
    3⤵
    PID:5692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7000,i,11509031847860351468,10035431201213027198,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8580 /prefetch:14
    3⤵
    PID:6492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8168,i,14956059372322316840,15978239778201308935,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=7196 /prefetch:14
    3⤵
    PID:3028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=10080,i,3316327080443656455,17144328556477776246,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:1
    3⤵
    PID:2324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7076,i,12263770200280874628,16763714466322300038,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=9964 /prefetch:14
    3⤵
    PID:7096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9008,i,13073804793246322859,9595437432996949732,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8932 /prefetch:14
    3⤵
    PID:3016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8688,i,16002136042118303124,13339339910713585012,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8696 /prefetch:14
    3⤵
    PID:1388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8632,i,9979519198441989911,3129965580954245633,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8928 /prefetch:1
    3⤵
    PID:5588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9028,i,7828665259779586279,345547365931777024,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:14
    3⤵
    PID:5764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8552,i,11176080223682851594,5917432643633531943,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8204 /prefetch:1
    3⤵
    PID:4540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8904,i,5936856213286147062,2849375148864468503,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8896 /prefetch:1
    3⤵
    PID:5244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=6612,i,15310158985956459745,11331746962528927008,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8556 /prefetch:1
    3⤵
    PID:4104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9432,i,7527258692829078921,16080040202102544254,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10080 /prefetch:14
    3⤵
    PID:3968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8332,i,7913139702811723646,9349911355217026317,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8240 /prefetch:1
    3⤵
    PID:2500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8400,i,4953364018961264039,2959197540461449073,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8792 /prefetch:14
    3⤵
    PID:2236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9500,i,16061386818218839078,645882854500333569,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=9552 /prefetch:1
    3⤵
    PID:6888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=7884,i,453053341626751231,15311310316194375869,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:1
    3⤵
    PID:6872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2512,i,2682925183334105267,11173121534353911977,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:14
    3⤵
    PID:1568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7984,i,14823876306230735162,6759431603978580895,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=3296 /prefetch:14
    3⤵
    PID:6856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2192,i,10232279576397735551,8678478506894167242,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=7940 /prefetch:14
    3⤵
    PID:3260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9852,i,14321950060491002575,6985925129076886671,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:14
    3⤵
    PID:4296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8432,i,14619402216768970224,6232372039135506646,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8460 /prefetch:14
    3⤵
    PID:7040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9524,i,6469743892981764061,9655828462805849328,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10204 /prefetch:14
    3⤵
    PID:5820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,12897806411815682057,8518501066129470028,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=9760 /prefetch:14
    3⤵
    PID:2604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8976,i,16691165869671782877,2118504338939702150,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10256 /prefetch:14
    3⤵
    PID:4836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9888,i,7755763981808835394,15232628683412731388,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=9036 /prefetch:14
    3⤵
    PID:7164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10064,i,8654078443906323920,6626306943630207519,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10112 /prefetch:14
    3⤵
    PID:6284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10356,i,2066597804403865814,16866483142888917616,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10352 /prefetch:14
    3⤵
    PID:2304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9456,i,7712820645700171345,15461915932817369424,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:14
    3⤵
    PID:1844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,17587137605743423525,1052610811066015017,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:14
    3⤵
    PID:2032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10548,i,17669976666735990791,13489831510395533820,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8504 /prefetch:14
    3⤵
    PID:4800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10696,i,886638198652044486,7452555950628268245,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10552 /prefetch:14
    3⤵
    PID:2372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10720,i,14147213400743076892,8107779145498518928,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=9044 /prefetch:14
    3⤵
    PID:4612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10756,i,8217476731610153895,1817516049618508544,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10716 /prefetch:14
    3⤵
    PID:2880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8556,i,16016758271314285827,3347181901973341317,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8768 /prefetch:14
    3⤵
    PID:5780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10204,i,16394342116794909828,5917194755156496474,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10852 /prefetch:14
    3⤵
    PID:6784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=6976,i,16170875310688063571,10581963436073471057,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8716 /prefetch:1
    3⤵
    PID:6232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7328,i,10653673619838899836,3951171382049590335,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:14
    3⤵
    PID:3188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10212,i,11447779970914492765,14111998330834235903,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10900 /prefetch:14
    3⤵
    PID:1156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10952,i,11431831183713560860,14737007084967098295,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10944 /prefetch:14
    3⤵
    PID:5144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10968,i,17199376667427348199,4015017961049536752,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10904 /prefetch:14
    3⤵
    PID:6408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11092,i,9485056705989407501,1336657132547356322,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11112 /prefetch:14
    3⤵
    PID:6120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=8380,i,3568317956562885575,10673737731826299179,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10088 /prefetch:1
    3⤵
    PID:7232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=11100,i,827276769876004094,12187115138572160040,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11096 /prefetch:1
    3⤵
    PID:7276
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11304,i,12658281692429605476,10233636138156744812,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11336 /prefetch:14
    3⤵
    PID:7352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11380,i,5781261446915026507,12659681859295434914,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:14
    3⤵
    PID:7536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11420,i,4218950221842404919,545917479832769199,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11480 /prefetch:14
    3⤵
    PID:7672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9948,i,12049820755937760301,14367900774076170326,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11496 /prefetch:14
    3⤵
    PID:7848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6892,i,17743779561752675034,3809253683247128616,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10456 /prefetch:14
    3⤵
    PID:7860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,10227350875641884141,8227238252984173426,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10064 /prefetch:14
    3⤵
    PID:7872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11560,i,10434336782629309609,3857613736216090329,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=10304 /prefetch:14
    3⤵
    PID:8024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11564,i,1325263784670628492,9060375214960893282,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11504 /prefetch:14
    3⤵
    PID:8036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11568,i,15216728510410886082,2637683452407901534,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11516 /prefetch:14
    3⤵
    PID:8044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8836,i,2251885754673033909,1947466176837504637,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8864 /prefetch:14
    3⤵
    PID:8104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7160,i,7162126438924361082,213638527239861005,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=7256 /prefetch:14
    3⤵
    PID:8116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10320,i,12190848015266683278,3733441041737742247,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8912 /prefetch:14
    3⤵
    PID:8132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,5606882503621056985,13649577473417330941,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=7272 /prefetch:14
    3⤵
    PID:1776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8280,i,17193980312562729672,12421246775484813101,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=9104 /prefetch:14
    3⤵
    PID:7408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6584,i,11997658443279567854,7949624888113763409,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8500 /prefetch:14
    3⤵
    PID:936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=7224,i,17328420315576591937,9807138742142134613,2097152 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8396 /prefetch:1
    3⤵
    PID:4388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,55718041448403163,1812122211406534560,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:14
    3⤵
    PID:7096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,6850474902852175058,12949495815261344860,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11640 /prefetch:14
    3⤵
    PID:5332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8948,i,4193601484732580260,10904351119667241675,65536 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=9468 /prefetch:3
    3⤵
    PID:1600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5788,i,2545240935155559254,7509301660201904052,262144 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:10
    3⤵
    PID:8176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,14963736816680883831,13459989830848600737,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:14
    3⤵
    PID:8056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8476,i,3031942394942552468,15540590601284581242,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:14
    3⤵
    PID:1128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8268,i,7772110143967059745,17738527201194020364,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11604 /prefetch:14
    3⤵
    PID:5312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,1037606489269488451,17752949248954001910,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
    3⤵
    PID:4668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11532,i,14552834350479984155,1179288858305191887,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
    3⤵
    PID:6488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,5695355025284886212,10828187376610705626,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=8860 /prefetch:14
    3⤵
    PID:5020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,3868846318535098311,11744106597332269503,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=4124 /prefetch:14
    3⤵
    PID:6388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4828,i,15030374360724330813,4109239823706633496,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:14
    3⤵
    PID:1108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,4675152514654190942,15608271275566122985,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11840 /prefetch:14
    3⤵
    PID:1156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11952,i,13846220230219810856,11649807016833111340,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=11944 /prefetch:14
    3⤵
    PID:4132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12220,i,2507795124712600777,6125888855979260319,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=12208 /prefetch:14
    3⤵
    PID:848
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,3963897021638136554,16176546669628441876,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=12192 /prefetch:14
    3⤵
    PID:7676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12084,i,12228916568699532838,8373366892214965513,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=12088 /prefetch:14
    3⤵
    PID:6092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12080,i,9677246843224746345,6890576423706028309,524288 --field-trial-handle=2272,i,15059671074480918663,17840182510056074641,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:14
    3⤵
    PID:3224

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1776

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:476

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004F4 0x00000000000004FC
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5616

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:6372

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:6756

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
PID:3536

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
PID:6684

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
1⤵
PID:6464

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
PID:3404

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6692

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\SetDisconnect.xml
1⤵
PID:5336

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2396

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
PID:2860

C:\Windows\System32\CredentialUIBroker.exe
"C:\Windows\System32\CredentialUIBroker.exe" NonAppContainer -Embedding
1⤵
PID:6380

C:\Windows\System32\RuntimeBroker.exe
C:\Windows\System32\RuntimeBroker.exe -Embedding
1⤵
PID:6920

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:6116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6fb1480ad12b08150f9b3ac124b733d8b2ac0bf9ed197c5f88e07cab78b86522
MD5 384a8c1042d427c714ffe16fa52e91c7
SHA1 7a932055d18c874c97c0b79eb358ec465858df92
SHA512 22a166b0d57153347b7fc6a5052a4e2e6cf1e3676148f4e06de17bd2224d5b80c8801cdd82f838aa262888191a3401946d43ad110e8b83824c41680e77363d7a
TLSH
T15CD097603D08B9E4C084203121A013006A211062AA69430C2010E51ECC34082B3AE9DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 64f10e410401c0ae61080e549d26b173d7a00de71705c91117a82e82c7eeed45
MD5 c1450dceb50c109d33f080a6b05d26c9
SHA1 7a6b4e11c79f135d9b3c3c0bc19204bfb733eb0f
SHA512 f6ab5346052d6260a12c335056476d219c614101c033f93fa44266a96f15bfa0cc17d2eb84dd1549dc045885eb1774792fb2e778d59281d27353de29512d5845
TLSH
T185D097B0BC2462F0C00D0030102022001A3201726BAA474A2061E80ECA70000F2EEEAD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 961a812c16c2b1acc09beadb1129fffc1ffd96c9f42cd8d598652528dd0909fb
MD5 878909b6bad50c3d16e2b96c83fd499c
SHA1 a68d9bfeb5b16892043ee555e3d451f539aae750
SHA512 03b3cef8b17f74dd79065d4d6ae2835b418efe43f22f9c6357545b0f5c49d8d1711a4a5a7385f5a268c0657ff86ac6f673fbfce2ebc932288096c4533d3f09cd
TLSH
T1F3D0A7B5B8055261C98A003170566740377340347AEE9E66A1EAF54E9AA0000B3EE57D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d0ff470e73c54c6bd5b8182d38be8a8d45964e2145eb40379cc727c457c1e33c
MD5 b74b84f2b44675d879737abc9aef46aa
SHA1 a2b8dcf368dc7ff139d23f640bfce30b0e4ba947
SHA512 83f6d7358b2d76e8e8ed7acf8bbcdf42d6f2325e1d84bbb56ca4c8413230845f888a20299e74e4edfd92fd47a83c759f22d2d5a924dce30ff50ae93085aa4cfb
TLSH
T130D0A7B5B8055265C98A003170566750377340343AEE9E66A1EAE54E9AA0000B3ED5AD
MD5 SHA1 SHA512 TLSH

Submit Download

3a4e16d5-f48a-48a5-947b-f76d86e0f743.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3a4e16d5-f48a-48a5-947b-f76d86e0f743.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

912eb257-93c2-458a-88b5-d710d36a09e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\912eb257-93c2-458a-88b5-d710d36a09e8.tmp
Size 414B
SHA256 fdb5d6cdfbb73cd4a952a838d5b6917bdb3dceebf4671b1df55d2b50a9f83e36
MD5 46b52444a33899623011b5dab7b157b3
SHA1 26c8abc5d97a042c7e88e3693d5d0571ccbbd05b
SHA512 626a187cdeccd0931077ef186c7030fa47ae2e6ccde8af886e2ec19bd21b541db08630160dbd5fb58166b556b93cf15a9e621e531e45e35e0633a3340729a9d9
TLSH
T1EBE02BA6D822AC7719FD1B1E50540746F790631B2A908D8F7B3D91094FB123601C9C2C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9ea732f0f7c1a574a5d56358b54933ddd779b7a92037e6fbed80979b9d9f10fe
MD5 794615bdb7ff492fdd7567c670cf0925
SHA1 ff1feaf3adc760eb7a47c077f4794f38db40f90d
SHA512 c144b9773a541a275a5a5596ae8949e33afc42e061e1395fbafac0a227040ab8b07af7eeef64c76ba47b2c02059be15f87085514c333ebaf3c18a03cfd0e5abc
TLSH
T1C8E0268808CDC23EAE4066C7627CB30CCBA07B8EA2CCF91A676088847406440F7E3691
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 34bfdab146138a4fb6e84aed1060c9836b59d49b2f5e752be172fc2b33387bc9
MD5 98a52ededac126050b9dc349923a7ce4
SHA1 39c975450aca14ec22188721d5fc04b69c9a24d5
SHA512 10f261eaacb65559c464d7a1e962002ee7ccb7e5a7f314a213d0a945d7706a55a3d053f181f01ab4387691736f0bda2abc7ff443013f61e207862c6b0b2dfbfa
TLSH
T159E07D8C18CCC22EAE90AEC791F8730DC2803B0AF2C8FD1A5B68848574C2490B7F3690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 5d9c2c41326ba4dc4132d66b3a2a5772e7fc54be70785255ee079993bc277a34
MD5 e2cbddc1d0e38015cac9642a877e774f
SHA1 93f851234500e2aa3a46bf11bd322a4dc4862a22
SHA512 da3743e3958963f1e4f09619c22706c3563c6c1693beb286f38930efbd144a88cf993eb8c85ec3fa09073f94573c16f9b569f24220a710073bea3d6eb41bc8fa
TLSH
T1CFE0268405CAC3BEAE8066D7E1F8730C82D0370BF6C8FA0A278088CB78434C0A683690
MD5 SHA1 SHA512 TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 603KB
SHA256 8fab26df533feec521187e19434917616c39e385f276c8ebeabb6ff5d945cabd
MD5 bc020e8d6fb627f45058350647074fa1
SHA1 a872678eeeee737572fe61e46ecca31f960ed07c
SHA512 fee2999270d12a644a9328c8e85e7e88905d673d78494d87e1f3498cbddf4e47e070db463b8385eb6df0d5b90c36319dab18b45e63479ca41fee4932a28244b1
SSDEEP 12288:dMv+MhlnN4WVqRpy33GEGEnIGHL3pRPGUiOCJ6XkrFze9qnLnWbmJAW0RD6MUl:i360Cpy33G8ndLpFGECJ6Xkrc+WbYA3e
TLSH
T165D4236973BEABABE496173050D0A31E7C71CAB327573703574A304D2EA92E5CE274D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 538KB
SHA256 c1f5700414e125b7426fcfe1f2c07478c784b49139c4d3fee921b82ef0d65eca
MD5 123810d150f819ec4557e4014f676276
SHA1 0f370219e7118823c85f7279414ce166ef338b1d
SHA512 2812a5862da37d7e561ed9efe1b1954ef1b8f21980b4fe53027ec97dd2c4978e3ac9882bf7ac4ad47f92913db809c1cba2c4d97c8fd285ef7f608a631cac15aa
SSDEEP 12288:qhdC/A8l8uHv5Hn52gNRf0FTKZi3zlxapo:h4a8uHv5H52gNwTWinso
TLSH
T1E4C4F1E8AB811A5EF649277E82778BDF3A5042F21E0629D3DB58CF5D32123D79C51C88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 1024KB
SHA256 bc85db3445b23e17fbe98e8b7cb97afe4e2ce0a363e30af74067560663544dfe
MD5 15acda3fbb22dea8cf1cee04af11b68b
SHA1 6304b04ed69a1d2c6c5fed187ae89e56bb92baff
SHA512 45f71c6c14a674947767385fd68adc55c039a1a19de2e072597e29d6ea923acd8f006319e5d03d7fc973aa8e2d33c77e1d740ab246f45d3f4cf4c42c34463e30
SSDEEP 24576:RGvL6DXoTxV0iCI7ox7nrRtHdvsdXi16tNgYjd3MU72vTiVGLp5qdbk:RILLKp9UdysNPjd3h7CTiPw
TLSH
T1F125336235BAC50CC68D8179086CECFC2364D7520E369B5A13F7992547C769A2C3EACB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 335KB
SHA256 510937c81cb1a502119ab143419709b78c971a487406b87287e5d0e818995e9a
MD5 9f9c9ac1a584487d0961c6af2cac057c
SHA1 dbe3f8ded8c2390dbf7263da9aae9c7dda1cd828
SHA512 5fd4adbc586cd8110325eac005eb71792205e8e0f0132971d0758747baa058290e23daa9d1fa4574982f227c4ef0f3eae2055873bdb293fd404cc753bec05421
SSDEEP 6144:1EYK/wn749QJWZHyBE3FQ8Buo3Faz9J0ze/79bZJQ6PXmMo9uLUz:1EYK/wn70h5sE3F4oVaRmzWJT3obz
TLSH
T1F6742325C2DDFB139B531A01147E5975C638E876E4C01FB28B3CE026AF26E2D1468DEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ca1b46a32daf656d6fd6f63d83e95b8a1f5d27b0ef3db96686869a598ea9cc0b
MD5 ee7be66aac3950e5cadb05061860d98a
SHA1 d4555f417ba0a60edfe20a7ea56e4dd95d9a3782
SHA512 d9d8c1c7789abda50ab7fea2b6a4690bf012f32ce958133dc6bfff56a8846709e43d28885c2021edfa282613b25c354baea1e63008a746d5976cd858c1bc5c00
TLSH
T1566195FB63711DD3DFA2477963E1D299B2F3889101E3AE2054425E3E0E02F0555E099B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 57c1fe7f7aac9140e5d1e5a18d946534776ff736c0839d086166435dbdb11c6d
MD5 27189791aedad3b3b5692a536cae2a2a
SHA1 5b6a29df4aad6544f2b3f0eb5154aa46b60752ee
SHA512 9a6764c94b78681182baf9a6424c2afe06b0cc26d461b1d62feb6bbd43d304d7ba5f91083615fcab91b83d092b73f647b5a5cc54ee2bda791f73ecb9a8671a26
TLSH
T1AE6184FB63711ED3DFB247B863E1D6A9B2F3889101E3AE2054425E3E0E02F0555E099B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e780d1873ea33bd4019ac2fcbef824b3bb552cc2a896b866e1a820caad644068
MD5 47f09d39ae43cdf8c93789d480f9a3bf
SHA1 c5674d6c46d32d10cc00980a270d845065f9289b
SHA512 c712e524e2b63cc3239199494381dd1bab5c4d7de8506d7c16eae54c81336478e5a4c6c213d4cf7ac16b0296bc78613da0a219ee4d5ef9d02c52fb6643556fa1
TLSH
T15661A7FB63311ED3DFB2477863E1D699B2F3889101E3AE6054425E3E0E02F0455E095B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dc654e3eadbbb1012ed113c546e54d0f951d8a073125099452c0ddab4bdb15b3
MD5 41df08e533ace9b6509888375beeae58
SHA1 0cc278d5b39ede06b9e600c9facac14154ad48c6
SHA512 07d8a9f1d0323d430731ee7bb20e83580ba6e3b2f885cb480ba5071701392a7627fe1caa3b8cf99b7eefb81adf04e11497bc5fa330e06cf07923c47c0f2f5526
TLSH
T1446194FB63711ED3DFA247B863E1D699B2F388D501E3AE2054526E3E0E02F0555E099B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 727a7ff815589d60fc3dbe25a5e7780b79b7ca209180aa6f69f1cd6085f30259
MD5 a177649b8f5003e75c77d2314ee9c9f7
SHA1 39b8e4d56b13442cd459ffce4e614bd28dc7d367
SHA512 ead51da68e109398bcaab0422047c7b40f96b98b5f571a745a4bbe8f1bfd37e13e34501785997d807bf01f3f9f80a7f22419dfa8a9d092a1d1d592e9449ee910
TLSH
T15F6185FB63711ED3DFB2477863E1D699B2F3889501E3AE2054526E3E0E02F0555E095B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b80b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b80b.TMP
Size 3KB
SHA256 3f12314fdc606fb9c6fe98e2e89a420cc058269348581848ea0bb713b666d4bd
MD5 6cd886bc5534ac7bce07b4a76f9eace5
SHA1 104cdd28ecf89d1adb6f6b680323893f66bc1400
SHA512 e3ee4cfa758971698b097a43399867d5d56d93518a4809a0531c0a24a5f3d49dade1dd54b6f5666e8469a589de7909e926dbe14f2f6c5854c61a9e12104e0531
TLSH
T13C6185FB63311DD3DFA2477963E1C699B6F78C9101E39E2054425E3E4E02F0525E099B
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b74ceaaa3fb70a7f4713871b073cf78279812523a13525a6bfd5d2d488288e0d
MD5 39a361cf99f021c39bfb43d470b025b0
SHA1 e365a7972ca7c50230d87372ebe55806fd0204cf
SHA512 15b5c0e87727cbba37216689ed06a3b1779ea80328ff8a356a28b0ca9a2e20fafdf3ae328d73983a70a26afaa3c351a5344bf5c0b780429512687fcec02f9288
SSDEEP 3:MsEllllkEthXllkl2zE06m5/l/:/M/xT02zVr
TLSH
T1AC4404047FC01D35CD4150304011C3500374D4F00553D74734510C135DC7DC40C01000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e3e48c5a1c792cf5a6c16b9848b8ae4cd2a6e248933eccde7152f9517c347042
MD5 f9751f520afeb23fed2358b359d1dcbd
SHA1 f7bf033c96e777479366a1ddb18155978741e520
SHA512 09d9960f298aa65f94da962f65272b581b40748627c268e47ad2f6d3dfd5d7ae288de981f0cd5a888a8fc5a84149c7a3f6e24d45e4d23d62ee846a8bd327ba2a
TLSH
T184319BF7C6E8567D8A0185F87B143E1BCE2D0854432C3E5AC4D4AF5BA7E1471D28095E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 16KB
SHA256 e65f40fd800badf6dc23cfe25d70e329a4b810c6fa92253d4a3b5fa27905eedb
MD5 3002ba5dfb16b56495fcfba329e0f16a
SHA1 21c13b97530461e4e7885b4116b9e28118cebf0d
SHA512 33738ede6124764d52baefe8cbf937eaab424eb827710c9f5defda99b99f7037ccd1c4eeb5f70d9f49e6f1effdc949323bc4e0b47b2dfe1dc3ddf5a5991c4dc1
SSDEEP 384:Debh/wVsHx060Otdo+YmFEg9ymWjVaaiZ2k2CknvQHWtl6cWq19HeYhWRNIrF9Il:Ra
TLSH
T18272B8F7C7E4863DCA1156F4AB157E2BCE5945648B2C3976C9D4FE06A3E2831E20170E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 ab56dc48f55071b2e2dee2adef1e34dc3d194ba53401cc253feac8c2460814db
MD5 43c76979451c0e03010cd0e0662d3cfd
SHA1 85881e3454316d28abd32b1d0a7661a2db795214
SHA512 672231021b9103b552061e0bbf32f5af7502fea472aa12e86d122aa2645dabf90cbe3b4cf6de62b9fd47bc9590b19a59ed3f5e6fac4c9e69901de95bee2ff03f
SSDEEP 384:DWxyCbR4QHTUoapGKWNltqC2c3FD+q6mVZ51Hkq1Ta1iHN95eEnFVVlB+m33289u:yOf
TLSH
T1505278FB87B0862DDB1195F4EB15AE2BCE5900648F5C39B589D0FE17A3E2472F10274A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 0a187d38b57febdbd692e3abe3ba92143a46c795b1a4c6b303be0c3bb86903f1
MD5 398c1ab0a4aae861dee3a5728b81eb09
SHA1 8674bde456d128011efafa1878caef14cf15c0eb
SHA512 4a24ec93c2c082e655021ba34972c01195a649400a9024b67d3e2abe01d8fc3238bd8e2bcdceef913a8aaf37440bcaf7301b365a6d933f6e5279d6a90e0db543
TLSH
T101D022271204B0F5A6BD7EC180AAEC8FC36700651912EED651D09CDC86714AC560B346
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 7KB
SHA256 663b37f1b488f5216856fe109bda8442a34b71ce4106b91b83c48b6cf5eeab3a
MD5 a60b0935170b896f3a02ab252e0e9094
SHA1 f755eec8c348663cb5e525fbafe1cbcd02d1e31a
SHA512 058fa67ef84bf6d4e65e5db1d5c8272f0f97fdf868b9da491392c9784dcc81241380dcb0734a74ced8fa4a526e1c09e295d4a934723f64b9130ccf619b698b23
SSDEEP 192:O7UEGU0UEfU9+U9eUEt2UHU9XU9UUErU9SU91xUzUEPU9wUE1UEXJUEaUEBTU94m:O7inDXXMkORHPMMzpZleFTNCPK4YM2fo
TLSH
T1A4F1D06B8ABFB46B103C58FB0D897C09587BE43501A164FADFAA81ACF0D55F31B06457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4ca7c98-c6d0-47a4-be51-6341059417b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d4ca7c98-c6d0-47a4-be51-6341059417b1.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d418a9890989f764d5fa17894aab9030e5ece981cab9cf2505d6c646289b54f1
MD5 1f81a3212d884d8b2a3948486eedd132
SHA1 96738b7008c8e08445eea3fa88706c97ee37ec77
SHA512 322838b8532721e865cd2cec84fa3cc5762eea08eeeb9150cdfdc76b2efc4b712a1afd849f23ee91b75c676a25f045d37f84bd5dd26df1e2807f43825b0b140e
SSDEEP 192:sxR/eRFh2/fns61m8bNsRzoA8pj9Vu/g6+WNMmdnYlOiWGBIgDCJ:sxRml2/fns61m8sM+/5/nonC
TLSH
T1E042B61669686D7B5CCBE21DBA55BF53D7F96032A1D41E48BBFC861C04E7ACD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6142352ccd1e948309ea777ae2d488bdd6be7e395db99113e321a7e64c64111e
MD5 2f489e54c76995415042c9f6fa8b4277
SHA1 69a61213a5ad5760b607d199b54a58eaeb1deb38
SHA512 52be12f0261fd1d240550e800ba2f7e6843410efc7d79c241b4dd998e225954668e9995d591590a2551cfff9399512ed9f351bdf530e4bf9a1ff277c8102457b
SSDEEP 192:sxR/sRgV2/fns61m8bNWRzoA8pPLj9Ve/g6+WNPyNaWfgfYHddrZYiWGBIgD2J:sxRU62/fns61m8WMDu/5df6n2
TLSH
T1E852B55669686D7B9CCBE21DFA55BB53D3F97032A1D41E44BBFC8A1C00E66DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2fba356ce3701be8df3b68f8ee121dcd5b3d4fb30758307a5ce3e3cbe2c59e81
MD5 0afffd005966f95746dd9c7723e2c536
SHA1 f497ed20ea1fdc404b784b2370023e058aac574c
SHA512 706d696abffbde284791ec68a7ae119d4a803391e06af76311db0e8882b792d54753a3fd12b87512ad38805524734e0b53ea9028eb78beec8f71dabc8fbb8546
SSDEEP 192:sxR/IRgW2/fnsjWpVL1m8bNWRzoA8p4EhVY8LB73fVe/g6+WNn38zqNXmg9YHXhn:sxRQv2/fnsjWvL1m8WMJhV9a/5V9VfE
TLSH
T19862A75668286D7B9CCBE21DFA55BF53E3F9702255D01E54ABFC891C00EB6DD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d4fd0d18f7662b994a87e347dd1d74fd8b04b893229468e3d8f6d451935ad09b
MD5 0851d912c21f4408138f52e24773a1f3
SHA1 ac8707c0d3633f91ea4a1b968436812db1cc4933
SHA512 5e93dc9c78efb9a15ba9d849fa8682ae3319e0e64ede12627c3a95458df7c6a2b66fda14ae1c9344e62300085f4a64ebf3c84318d6ac6bd30cde868c1b632355
SSDEEP 192:sxR/sRgG2/fns61m8bNWRzoA8pPLj9Ve/g6+WNPyNaWN6BYHdd5ZYiWGBIgDMJ:sxRU12/fns61m8WMDu/5zBEnE
TLSH
T1E052A55769686D7B9CCBE21DBA55BF53D3F9B03261D41E44ABFC8A1C00E66DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a548777e731a917a794c29e897741a3e04f19b687c071531c43be795347f9fc4
MD5 09bd682e8c4da773f856e0063151892f
SHA1 3f9f8567e6db147765f3f2330063ec13a562651f
SHA512 c655f962accc2faf7ce625a37847b8dc0d81d0bf1041603d09170ade334565364f98dbfba56fd9599626a446178944ea6cce2468eaf742679d30e857094510ed
SSDEEP 192:sxR/eRgm2/fns61m8bNWRzoA8pgij9VK/g6+WNmab4p9YlYiWGBIgDCJ:sxRmZ2/fns61m8WMxa/5e9anC
TLSH
T1E052C75269286D7B9CCBE21DBA15BF53D3F9B03261D41E04BBFC8A1C00E66DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 569aca0dbdd80c3d09c9af9aa061b49608add2b3c780caf36cea9721f6bbfa30
MD5 f35afdf26f15935a65de0acd409bf6eb
SHA1 0d3f7b0d5ff2ba1d1e4e718aea5db1bafd4a57fc
SHA512 a7ac9add9b28f37deb93255512a94af75db25caa2a1152a27499b88cdf3b8d62f811adb1445c17edd6f6e2b93e7df717b4e0e9691187c73b2b0f2866354a0e69
SSDEEP 192:sxR/eRFM2/fns61k8bNsRzoA8pj9T6/g6+WNM45dYlhiWGBIgDCJ:sxRmo2/fns61k8sMw/5ZdtnC
TLSH
T1BE42C6166968A93B5CCBE21DFA157F53D7F96032A1D42E44BBFC861C04E76CD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 be32e7b96b62a941350591399f3a14ec75192eb005201fbf2bf9ad27257c2307
MD5 cf49aea183fdd1ce3725767e4c7639fb
SHA1 e6f6b3d922c193c4ff6b3b9444c408225dab2cfd
SHA512 a5e94e7c17b409261d0c5c6682e86967aa1b1f2a8209980cb5cd8fe9ccd4a8521d2b893c52d7fdd91f9b22903376f55a9a0256b4e5275827e30fab74c579c117
SSDEEP 192:sxR/sRgI2/fns61m8bNWRzoA8pPLj9Ve/g6+WNmabHs1YlTiWGBIgD2J:sxRUB2/fns61m8WMDu/5K1Zn2
TLSH
T18C52B65669686D7B9CCBE21DFA55BB53D3F9703261D41E04BBFC8A1C00E66DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c371d9a0047fa9801335e9e1204d9eb6417fddf6dad88c38a25911424dbbb365
MD5 3841cfa74880587f93c099ce22de10fe
SHA1 edf0e43da9832996d44577aeae9fcf1652245880
SHA512 6b272b57692bad154f6a55046e863d51e1245a0e9859b545c67f00cb5a235c32fcfce54733af8ad16425c05ec65fc300d8f5c65d8054f1e817bda35ad996a48b
SSDEEP 192:sxR/JRF92/fnsk1k8bNsRzoA8pq6/g6+WNMmLKP/YlEOiWGBIgQJ:sxRxR2/fnsk1k8sM5/5x+P/rHn0
TLSH
T15F32C7166968AD3B8CCBE21DFB157F53D7F96032A1D41E44AAFC861C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 d18ea49bc3c817a14603337488e17c801871098281e320d78ffb3ff10b026a39
MD5 e15d762841e55a97baf7914e6b3cc984
SHA1 c6638b308e8d3ff0df43b1804fd338ab6d11ed92
SHA512 69e4ccc30bc6f21b334f18f72d9c92f5c13ab6632e97c5640ce995484f4beb1b05fdd7ca4a8779c4e6122fa9d027ef01224556ac955186a48981c798b982e23f
SSDEEP 192:sxR/eRgl2/fns61m8bNWRzoA8pgij9Vm/g6+WNhRPErYljiWGBIgDCJ:sxRmq2/fns61m8WMx2/5QrVnC
TLSH
T12042B71669686D7B9CCBE21DFA55BF53D3F96032A1D41E44BBFC8A1C00E66DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 85858e9cec56d4d47c4eace96e2e898e9b80bfdd2a2da4802ea164f54993aaec
MD5 fb02986daf64be9e3be859b409320bd8
SHA1 29a97214e8b9664468ecc615c9fafba983cabf1b
SHA512 fbef13b8e86d02196eb28869b462ad3d66c9b07d401525b7150435c6945a6f91c5eba271d3f58fda7f977c043ef507c315ec7dc16851fea627773a3515edf047
SSDEEP 192:sxR/xRgA2/fns61m8bNWRzoA8p4EhVY8Lj3fVe/g6+WNPyNaWJm9YHkdxZhiWGBE:sxRJF2/fns61m8WMJhV9w/559CnE
TLSH
T12662A5566928697B9CCBE21DFA55BF53D3F9B02251D02E54ABFC8A1C00E76DD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 06bc75217cd5f40519aeb862d1b21aaa2492c8af03cb1833c555b7c56a1754ec
MD5 d511636412cd5876d82ef16f4c50fa3b
SHA1 716b8f59bddfd161bfbe759cef82efae0cb46eb3
SHA512 a4173f42458ad78173b25bc097efc830273671bd0d6f0a984d273417e545558ed3c0c388e35d2ce0e3c1345d2476ab77645d85308700601837b7795b83c16897
SSDEEP 192:sxR/IRgW2/fns61m8bNWRzoA8p4EhVY8LB73fVe/g6+WNk6o8zaWXmg9YHedTZhB:sxRQv2/fns61m8WMJhV9a/5Hv96nE
TLSH
T1A962B75669286D7B9CCBE21DFA55BF53E3F9B02251D01E14ABFC8A1C00E76DD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2ba99ea2d5960fadcfb14e93ca9f651c444a8f0da409319d56996dda4d2320cf
MD5 a3eb8b480ed5b7110cf8eb0d1f12d43a
SHA1 5ef3b496e08001ca8b5de9041c60effe52423691
SHA512 bc94bbb23be63141d15e0d7155f64703f2f19724964c3a4b255fa73f79f2e6b00142fcd1c9dcd07a399cc42448def7954e25fb98a8f0ecadc5c37615439ec73a
SSDEEP 192:sxR/IRgB2/fns8GWpVH1mWZdFRzoA8p4EhVY8LB73RQVq/g6+WNn38zqNwHjPBHK:sxRQ62/fnsjWvH1mgrMJhV9F/5Ujc3/
TLSH
T1BC6295566828697B9CCBE61DFA55BF63D3F9702251901E54AFFC8A1C00E76DD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 f6573e84e13258d197508296f2f89b68de1700056942301bccb354ccbd11486b
MD5 ffce63183184341a2ade607d8eaa6caa
SHA1 f9fe59a94ee1e986866a20ff17cf9f4f2649751d
SHA512 08e2f808381ea11ea1f943e68e2b40c158a40fc60823bfca2813927f6684d1ff9c2403e27e6a5106d939887a0c01b7c0ad995fba7e39f539b22ec84fdf42af2f
SSDEEP 192:sxR/IRNy2/fns8GWpVH1mWZdFRzoA8p4EhVYF473RQVE/g6+WNsY8zqNk01Bjs7Q:sxRQq2/fnsjWvH1mgrMJhVx/5N1t3/
TLSH
T1C282C693B4346D7B9DCBE529F661BB27D3B9702691D01E45AFFC892C00E7AEC6102847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 f093c27bc1da295ef072bb7e867f5254ba1e00162f6f7e1bf9123dc44ea183d9
MD5 d824456e5f56438b796fae72990be662
SHA1 b2f71aa7a8df4ae7539afb8b1d4705d989a6086f
SHA512 455b4236402175c6f237a9bf5295b85d0e207eee5c726c0f6db40bf17ca484318e182830d499f1fcf9caaa2d108f84e99fb217c0cc1bdcd063196008f00909e1
SSDEEP 192:sxR/IRNp2/fns8GWpVH1mWZdaRzoA8p4EhVYF47bRQsE/g6+WNsY8zqNAxnBjs79:sxRQh2/fnsjWvH1mgsMJhVG/56nY3/
TLSH
T1A682C593B4346D7B9DCBE529F665BB27D3B9702291D01E45AFFC892C00E7AEC6102847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 07735c2b80f6472025ba1ddd2b0de6fbeb53ceb2696e527a9e0d9f47831ae16b
MD5 132cbcead2ad1d79db5a0348414082bd
SHA1 7cba13def12f8eadcd633ebbfb87e0b3998beeb5
SHA512 b5aa4120eaa9e4c3fa2ecd133e901cc63bd57e4e48784221d6aa9084cd780b2e88419c211f08d0f70b5e1a40672de17f17c98f88d108e47d98f2ea253bf74dfd
SSDEEP 192:sxR/IRNa2/fns8GWpVH1mWZd9RzoA8p4EhVY7G647bRQsE/g6+WNs+7zqN5f7BjT:sxRQC2/fnsjWvH1mgzMJhV3s/5u7p3/
TLSH
T13982B693B8346D7B9DCAE529F661BB27D3B9702251D01E45AFFCC92C00E7AED6102847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 0144e159c8a89fff28634bf869f6d97f2675e61fe068366d7603ffb36973156e
MD5 29a53c8cf288d3337805d8576bdadfbc
SHA1 25a9d485eef512159bdaea7c4064c5289d78c3e6
SHA512 992343de03dd0ec4c696999a290350845cba21e512572ee4899a8c9197fbbaa449ac3d4ab88308a0f68930c2f43e60c08f1079ba423b9880e3bb95112832973c
SSDEEP 192:sxR/IRNm2/fns8GWpVH1mWZd9RzoA8p4EhVY7G647URQs7/g6+WNs+7zqNOVlBjh:sxRQe2/fnsjWvH1mgzMJhV32/5nl73/
TLSH
T1FA82B693B4346D7B9DCBE129F661BB27D3B9702251D01E45AFFC892C00E7AED6102847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 6f3cf3db15dd6a4032890ef518c0bc5d029770e184d417aff217b3d2e190a795
MD5 5dc13e9a122b326e6f6566b0a0980934
SHA1 d72246cf5b3560ee9fdcc49d507afa4e24c1ae4c
SHA512 dc2bcfd7bd527f36dbc0d8e044104d50c1a1bbd0c52af4195fd274ae015c764f68642550736bd604313c69cf667b1b852af243c8118548841d6afd0029689cbc
SSDEEP 384:sxRQPMe2/fnsjWvH1mgjMJhV3G/5XX/3/:sc0e2/f+YHEqShV3G/5n/v
TLSH
T1CA82B593B4346D7B9DCBE129F661BB27D3B9702691D01E45AFFC892C00E7AED6102847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 271732add18e269280b59d43a739a7e416fac5d9a607646da95718d759de1583
MD5 ff5a73aff95005cb9c003b50b8fb395f
SHA1 033ecda12ae95e92f310ffb53ddef26447adb1dd
SHA512 e272697efe631deac348e4f3f1f06e9c7b69273c914915bc66e6a855abc1844527a0afc9b705b5dc811cfabda638cd4a7ebfb57016e62323e7976e7f55541cdf
SSDEEP 192:sxR/IRNkp2/fns8GWpVH1mWZdNRzoA8p4EhVY7G647URQ8k/g6+WNs+7zqNBvlBu:sxRQ62/fnsjWvH1mgjMJhV3x/58ls3/
TLSH
T1CB82B593B4346D7B9DCBE129F661BB27D3B9702691D01E45AFFC892C00E7AED6102847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 fc6bcc6a547ab359cadad94be75017a9441575fe620557f2ff1d85b93e56dd44
MD5 65021c8613fbeabfa2ca2d682085cc07
SHA1 1347815f7b16bc9da47f340980d7de1a3ce0bce3
SHA512 f953736a7714ce5911af07d32620646c281cda749c96b71a044907b175a3b870359b6140ef9ce1851794cf36aebcf2db94f8c51210b6816ddf272cbbb943fb10
SSDEEP 192:sxR/IRNL2/fns8GWpVH1mWZdFRzoA8p4EhVY8LB73RQVP/g6+WNsY8zqNdi9Bjsi:sxRQz2/fnsjWvH1mgrMJhV9A/5S9f3/
TLSH
T1B882B693B4346D7B5DCBE129F665BB27D3B9702295D01E45AFFC892C00E7AEC6102847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 31KB
SHA256 ab094f046d649c37add77dca7563cc6c38a765700b75c6c6257f20eaf1c46ae5
MD5 183ae6707d2c0e0913a9fac32c5c2c45
SHA1 7d3f672a3018fbbc8a17fd3802780027abe6ede1
SHA512 885d9208a1a501fc3c5628d0a33672a64c5f92418d5b8af93d8996502647b170abad0651fdb613a8e8a0b81b4417d9cc78be4f83b52992b935f6557f07b90f43
SSDEEP 384:sxRQ62/fnsjWvH1Q66s8qMpRiYnazAW8pZS15posJWeT+NgjMJhV3x/535n3/:sc62/f+YHC4Mnc7WeT+NqShV3x/5pnv
TLSH
T1C4E2F746A424D87B9AC76D29B53CBE37D6AC601251C4DEDA6EECC91C00DE5FDAB03843
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 391bc73dc81b6bb48b3b77937a8d88a73da65715224e86ffc44680be50fa81a5
MD5 b64c3da12df8250864cf38015503fd31
SHA1 ac885fc129532d05dbc5517d33a4ffdc79e4bde2
SHA512 1280d8a8ee45d76090057054c9e088a392be4f959cb37a3235a96b545c2253df8e013b2dd4ff2f6c3d6d8a45c16ef208b339e47f78a4a892d780898d4e807187
SSDEEP 384:dpCfAo9fCtggCFf9JKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV//93VRRjroK/+:dofAoxWgg+f9J8F1+UoAYDCx9Tuqh0Vh
TLSH
T1FAB2D93B600DCB7E9FC04A9DEC19AF976D9802C796948D4047FE994C03C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dbc21efe-494b-4aef-aecf-6b4521d42992\index-dir\the-real-index
Size 360B
SHA256 cdab9e173271cc67d6324651d663d731c6731250e5df16b3d076997179563ce9
MD5 25c7d0e63b2cfd01f932a07fe8f9adfb
SHA1 7d080ce2b97a81ec7e9a22b3afef5cbf3637fbb5
SHA512 52e6723f87d48f60e4f67b65d947e008a78b7a0000435395c036110e9cf8691458f0b384a9ad48a8d88a7d197ccfeb50b3196e28a46259bfd29e6451ac63b10b
TLSH
T10AE0EB8B8C93480BCE233CB60673902E333B02FD2A00AE0A00FC001D9501B3C4201209
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5f89ab.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dbc21efe-494b-4aef-aecf-6b4521d42992\index-dir\the-real-index~RFe5f89ab.TMP
Size 360B
SHA256 95d2d93adf09f9cae8b41a657b31b54e671fe5c96293b8114b6b2470e8efa01e
MD5 1dbb0d84a72b11f3117ed231b3a3c617
SHA1 f8c43efa6e5f3c618b34eaa052b389888b97377b
SHA512 c400b8c50282af345b8f801b96f4f6534564f43389d316edf30b5a1f1e7f1f315a87fa56a2221f4eb5d0203887fbdcec79d771c2dd48d0f12d6ec044259b0e4b
TLSH
T152E095CF40D16D53CD1759751913911F333F0C382D15D71B20EE545F5561BBC854560E
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 5b7261c801182f0ad526572eb16e1f7df50cfcd80053bc5ce01e85f2505e05da
MD5 7394e83bb7aa3506a899a73132670961
SHA1 05d6420822d371b1361abe7a90f8958f7d10e879
SHA512 77c28570a8bcdd4ad59ddc6f59a62f7cb28a9db6adaabe869741ced55d0d045b2beebd8ed114fe35a6091b80b4f5f1e4525b8d8a25616c4a12f6406bc06f0b8e
TLSH
T1CAE0D8F67AE72410B87F97E5207144F54582F854D858EC0E706AA3DBE4E53542C19C21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 17840132dace0bdf9854054359b3e2d6b4c3192614c56668b3b9cde39c2f7817
MD5 7c771e5ad3fec6a62b06767e56accb88
SHA1 70282718adbc98f7596ea3608ef1ae9dbd4e1f1e
SHA512 3ccf0ade540bbb4f3ee46c76b023d9ff6e4d5d43e47f277e2d9eaa83177e4c79dbb20b04d9fb59add31599b5dd14f4a009a785aaf39a3c18195f6c5591efd67b
TLSH
T149B002A093006D33DA5627F259C247A877645D394BD60E2765B303B8AD58A828E37904
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 696e5005b01afbfc7769917ae64700241598474a16fcbef4c1ebd97b7adc5b37
MD5 5289c37107afba2298f710ee224baed9
SHA1 5ebf0e0781d68059b76aa379af089e5aad7d7720
SHA512 96094b17566fff2d4e4ad0cb35e4f09533d193fa07ce1b650bca2d1ce4ee2e44dda96e2be3793aac3f8601ba288a7fc833107ff871fceeb9f016be9f7b9fec28
TLSH
T141216E1269BE02546CBF350F81DC8F17C27335B3B294E93A7E6800569DA7E006DBC8CA
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f4d2b2207bfa2310a8d1028207e28a861a5ca212574a5e5a388f1db6bd19813f
MD5 5f34727bf3c9d47657e19a0456353e2e
SHA1 c0d632b4714afd7915a5baf443dd826f33b0b40b
SHA512 95d43be42f9dcf3742db1f9353cef6696feb03270a0d944f87da0f97784cfe4ae0d0f24331be9deb411a51803c5e87891feee86448770d513fd87dd8cd0ca30b
SSDEEP 48:KgfIBKQA0PyVVI1KuggS5IRKis07y3pg15jT:KgfWKQA2eVqKug15uKisCN
TLSH
T15091B11138BE02516DBF354E909C9F27829731B37264E93A7B6900A65DABE007DFDCC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5be106.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5be106.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a5e381303579a7c71c85903bd4c79f5e5c184950fbcbec1bc2d8625a09dffe3a
MD5 f003138bd3c341af9e619376bc5548ff
SHA1 584141a266ef4ae54c493b1318e3fe0e0a76d145
SHA512 efb01005ae21a1578d3cbbc82f48ad9656ce3bfbd80e5cff99d8d4dbd2fce2610ca91a7b921f6e9ad274b3d7023eca537e8d6ad8a6f3d3dc8ca85a5f69e5b425
SSDEEP 768:jrv+4UNbd632UYiJU44eUNHXmTWTbc+H0laoa:jbsbY3AP4ieWn1Ulaoa
TLSH
T1D203C071ACA9DE33ADFB9688B44F7B437FB8216344C40A54C9C9AB8D118B15D134BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 250da76530f0d6bf6f8516ebc025d9d2ff8f6ad771678caf533c6f84bd133c1e
MD5 b905bd5996e59cd1bfe5d950363623ae
SHA1 b5b17fcc0b8865304d1048e83b45f1bc2671ecc5
SHA512 61ac18895f7cc9aa7ed194becd9a2574a961a7e1ea620c444696a4dd9729fd8c0efc84c430057fd4ec2bc3ccae77f7b17b8cddac2b8d00c1319391d5b4864342
SSDEEP 768:Yrv+4UNbdE3De2iJU44e4NHXmTWTbc+H0laoa:Ybsb23XP4CeWn1Ulaoa
TLSH
T10603C071ACADDE33ADFB9688B00F7A437FB8216344C40A54C9C9AB8D118B15D134BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bc48b136404d71af4cf2a6ee002eae31fa098504d8c4d82b5db120f2a5e69283
MD5 aafb506f62693442d4e5f2ee6525dc34
SHA1 f82e4c8153b58e7b62f92eab147b46f0b3f6ada1
SHA512 bc4dc1abb10457fde08bc92fe533be204b81e061b4f0d027283b29af265d630090a114e05ef2dee0ae5de3bd41efaf91e6ccc464d63d52ee0da5d8cebe9b8b92
SSDEEP 768:/rv+4UNbd33Dg2iJU44e8NHXmTWTbc+H0laoa:/bsbt3JP4ieWn1Ulaoa
TLSH
T11003C071ACADDE33ADFB9688B10F7A437FB8216344C40A54C9C9AB8D118B55D134BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b58257c8157e73adcf206d17bc062a913b06b0fa899570ced5cc4c172ce182a5
MD5 9cbecde584a67c7cef9f772de1410065
SHA1 27e6df9ad6b78d25358b1819c9cba040408456d8
SHA512 24ed21de7ad46f5dcf65bb9e090194a381efd60a6de0d3aff8919fbc87db544cb3b786c1b47d1ec476be24d2f1394bb773cd9204f0811206a6c0ecb9efe353db
SSDEEP 768:Drv+4UNbdq32XkiJU44e4NHXmTWTbc+H0laoa:Dbsbk3/P4CeWn1Ulaoa
TLSH
T17403CF71ACADDE33ADFB9688B40F7A437FB8216384C40A54C9C9AB4D118B15D174BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 9da8cf32a3d45b051cd646dbedc331ee27bef2557c172be72e252e3c30540549
MD5 91d2b9786956c84b7a290f4b0e241939
SHA1 78f0111777520772736fa9b6c1eb81c8e9702e7a
SHA512 99cecde4de6c5901308ac32f35fbed31b040e2f3c2db111e898c4d65eb3849f4376daff2623a2446fd11d0b0e1c39ddf360b640a66d349a374bd81fa0ba278a7
SSDEEP 768:Vs37g2iJU44e8NHXmTWTbc+H0lPi9PLtH:Vs35P4ieWn1UlPYtH
TLSH
T148F2BF70ECA99E23BDFEEAC8A50A77466EF9117394C81A48C9DDE70D118311D034B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 be5831ca88ae3880b281efac9c7072913fb3a7d288aecce351061790f8598fc4
MD5 29f36c8672d505af5b4de5158b53b75d
SHA1 5dd0860f21c3c1baa77ce8af7e6d541f90c476ff
SHA512 ef59223df5fb1e4c81a12fdbf2c54552733d7de8bd5806a601bc644a054c4e670135fe742699725c2b00112a1ec3f97141efd2b06dae3ddc82fdf40ee5fd2147
SSDEEP 768:V737T2iJU44eXNHXmTWTbc+H0lPi9PLtH:V73+P4PeWn1UlPYtH
TLSH
T118F2B070ECA99E23ACFEEAC8A50A77466EF91173D4C81A44CADDE70D118351D034B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 60a5f6bb0c54736f3bb3697c250af0af0c5070b10862f4eb494adf236b95622a
MD5 6848360093bf88d88fe9ccc7ae0fb631
SHA1 31cedd57f64012da0a8e59738547002237fbaf97
SHA512 421558bca9cd55da102a99ed1a7f93d84ff501b2541a6a5cd82d1d4632cecc3c5715b0175e7ee73490d04563b708164a4105a0d122a1111b068053f4f1551c8f
SSDEEP 768:Vy37G2iJU44eyNHXmTWTbc+H0lPi9PLtH:Vy3nP4ceWn1UlPYtH
TLSH
T17CF2B070ECA99E23ADFEEAD8A50A77466EF91173D4C81A44C9DDE70D118311D034B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 00cb581b61e80a7774c42d804a4bf157d3537eda212ac8e324cf2f7512f00e5b
MD5 e7fc317f791c7e97c99c13f064e9304b
SHA1 50b3984523f6d668ccc92986f56bcb6f30914fbb
SHA512 48b7cf767992c6a4eb659c66fb33d6e111a13792ecbee51f81a9d942ff923a74916cd23b864ad4dde7f6aaa1e821a9151f926d94f36540374f55794db411f436
SSDEEP 768:krv+4UNbdO3DM2iJU44e4NHXmTWTbc+H0laoa:kbsbM3NP4CeWn1Ulaoa
TLSH
T1B403CF71ACADDE33ADFB9688B00F7A537FB8216344C40A54C9C9AB8D118B15D134BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 828ff60c30f6508a45fc389a95a4dde9fe957c04695d7c30a9e925da48b4462d
MD5 30068bc4660a15f337825f175e397338
SHA1 b2ab8d5b1cbba9da108151b247a7d8b12e223628
SHA512 3b7716d033491ff562dab01532d4b9322bedd839894ee2369da14e2f9442ee8fb0af8c4824fd416c1dca05cec229cf1ee5555420c387212b2293a071fb76c2b9
SSDEEP 768:V037C2iJU44e3NHXmTWTbc+H0lPi9PLtH:V03LP43eWn1UlPYtH
TLSH
T1F7F2BF70ECA99E23ADFEEAC8A50A77466EF91173D5C81A48C9DDE70D118311D034B83B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 ccba13da24c2e732bd6e2e21992c9e22607e96224679b38393e7f979e51429dd
MD5 79f07da0061dbffc4b1b283b375e57d9
SHA1 c28a5c20709dd5e046ceea65812e02d2750332fd
SHA512 0aa72c4d75c4256095c99fe9a6918aeb29145c12b12f86e2f55a0abd73a67c9fc0195db9856c899abb009a6513e01e4d0eef19edc242b55861e576e0782af8d3
SSDEEP 768:3037K2iJU44e3NHXmTWTbc+Hk+bGJPi9PLtH:303jP43eWn1EMGJPYtH
TLSH
T10D138D7CDCA58A3F9CAEBB88610E2A256DA91173E1F40958C7C9A70DD07251CF74782B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 0d43b4811874b676b9ab58d552b1bc81613a8674cc05a9f37df5f19d4a669258
MD5 5c18aa3cde7bf10072c45244a1abf823
SHA1 e06fc733e871a4dd0e66f2cdef6a7ca683093e96
SHA512 b3d039b2e6d44534651f2bf9e5d96d13839f1f9b6d06be3dc54e001398d581d4bc1991ba602984611fb16d72b245bd5d1096a67a49d5666b6726b7ec3d0f671c
SSDEEP 384:nNZcI038Nw/c6OqI2lzRfY9bYz44cjYQPlLJQXmIkdP9IimIMWEfMbc+07POPrXD:V03PE2iJU44ezNHXmTWTbc+07Pi9PLt/
TLSH
T14CF2BF70ECA99E67ADFAAEC9A50B7B067FF9112391C81944CADDEB0D118351D034783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 8c4d43b072ea0ce19c8d2fd561cfd385db0f159d4fbb6239060780b632fa6692
MD5 2437f94f30003795648254f27c618748
SHA1 d44b8716bbf0717c42edb497ce8588c6aba8103a
SHA512 856f136e0000bdf510a178ee17d270798aa6a7cc6ebe3dd3d0b59c670516d10a777c65af23743b79b31cd8b5469016fda97be55665b2a819d995ee2965780d54
SSDEEP 384:njZcI038Nwhc6O/o2lzRfY9bYz44cjoQPlLJQXmIkdP9IimIMWEfMbc+07POPrXD:7031R2iJU44ejNHXmTWTbc+07Pi9PLt/
TLSH
T1B4F2BF70ECA99E67ADFBEEC9A60B7B067EF9112391C81544CADDAB0D118351D034783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 239d1c679713e2c26e6c07605ce632101a3bcda19fa30cc391f72931144f5558
MD5 e244977ba4b7df232a421e0502ca6324
SHA1 5c3ffc595772fb11edde0bbd23ef4659ffe6964c
SHA512 a07367d6a2bf7628d879a69ee4f960bc94e99409862112a8303f585586c7689ac198f1390ea445c0164fdf4f22047bb36ab604c828e2e720cefaad4863477174
SSDEEP 768:brv+4UNbdM3RfMiJU44emNHXmTWTbc+e0leVH1SvyZ:bbsb+3iP4YeWn1llEH1dZ
TLSH
T1C203C0719CB9CE37ADF796C8744BBA477EB9116384C80A94C8C9AB4D019B08D034BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 cb353e8432f289ef2fa715f44d12ba527cbe5cdab8870c8f9888ddbc70cdf123
MD5 438ef5b58c1631183823bf62e96ef46b
SHA1 2798b682b0db7f7413ace3146801d2f791bfbaa3
SHA512 fcce350b69fb67956119058564153c21205b693e95d809a7450bcfb2bc6fd0fa3b52fa5642483c03ea548a98f445661a56d2eb4cacf0b90a8a0a0003f629080c
SSDEEP 384:nNZcIm38Nw/c6OEX2lzRfY9bYz44cjYQPlLJQXmIkdP9IimIMWEfMbc+07POPrXD:Vm3Pt2iJU44ezNHXmTWTbc+07Pi9PLt/
TLSH
T1ADF2BF70ECA99A67ADFAAEC9A50B7B067FF9112391C81944C9DDEB0D118351D034783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 4a490af77b57a8f8def66b5c6da4d167c06d75fb4b68a2a60ba4f566f114a253
MD5 949dcb6d7e5b57cdff1fba9d980e1a41
SHA1 b15d2284af7c371cb43c8105142bd270871ba4e6
SHA512 4147454dd1e37fe7a5c14a0e71d37743051b08ae4c32b852e04f550416bddc24d7d5d507bdb6c965def231e1ea45c4d3b4f0fe75d591e2103ab58b5b4073181c
SSDEEP 768:V63XvJ2iJU44ezNHXmTWTbc+07Pi9PLt/:V63IP43eWn1yPYt/
TLSH
T10DF2BF70ECA99E67ADFAAEC9A50B7B067FF9112391C81544CADDEB0D118351D034783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 3c03fd95d0eb7e95e95ebe6bb9a0ab73bde540f6ba4ff9d22334f7ab16bd491d
MD5 491625dee389a36b51653fadc08e755f
SHA1 997a2c017e4b3814c5df86d47362434fbeae6e30
SHA512 d35b011a99cbd4d8773cafe348ca7cc1bf515ee5e11ff95f5aa8fbc24a38908376665bc23108998eb277e9f48ac30bce5b8c94510cc0e7a0a4fb40c7b4b5e21a
SSDEEP 384:nNZcIF38Nwkc6Oop2lzRfY9bYz44cjYQPlLJQXmIkdP9IimIMWEfMbc+07POPrXD:VF3QX2iJU44ezNHXmTWTbc+07Pi9PLt/
TLSH
T1C7F2BF70ECA99E67ADFAAEC9A50B7B067FF9112391C81944CADDEB0D118351D034783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 a192c25d04ddc64709f45da514d8bffc7072ce370b95d0421b7c4679d99347a6
MD5 5309e87f0e5f7970a78577a47de20763
SHA1 5bc25ac5939c16bfeef7a0ed9f28ea829044d144
SHA512 a757576ae5dc91dd1d7e91fc7249a8f87bb59ff5d56ff8943a93f4a3a3abf6daeb37bd641ab64d2aa1dd2afe469ddbfa6e51f70bcaaf87aac2f47c34b84cc133
SSDEEP 768:8FH23HwgYmzcU44eFNHXmTWTbc+07Pi9PLt/:k23B41eWn1yPYt/
TLSH
T1DB039E71DCA4DA6BBDF79FC5A60A7B06AEE5116381DC18D4DAC8AE4C108319D0347C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 d1f3c6d9f610337d77d095380837e006d56917c6e6d3b747044fdb802f55b172
MD5 55b251297df42d279654232a56c0826c
SHA1 6dcb1a2c01cb811423ac0fe3966960ed2ee994eb
SHA512 8f05cab6467dc97961379be23c0f686b7eebc4171d9e264dad883dc9a200f819be745492d06b0af3d29acf993af5f278fe498e610e4c88d861869f787d3fc2eb
SSDEEP 384:nNZcIE38NwXc6OzH2lzRfY9bYz44cjYQPlLJQXmIkdP9IimIMWEfMbc+07POPrXD:VE3X82iJU44ezNHXmTWTbc+07Pi9PLt/
TLSH
T13AF2BF70ECA99E67ADFAAEC9A60B7B067FF9112391C81544C9DDEB0D118351D034783B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 c78c1849b718b4d9314cfa73d5469647833fd26b0d8df7805e28d797b8d32731
MD5 677d25788e25b00c48cd6dfa89a95424
SHA1 20464fbf362ee1278ca21863aa4dcdcbbdb80f3e
SHA512 e25d499810c4572c8965c931369724c4d3d7b6a673d57af7e66ad24fa9f3ea22f2ffda58200eeaf675d24837b6332743401a7e6d1415fed0d2123192f4a22f80
SSDEEP 768:arv+4UNbdM3AJziJU41NHXmTWTbc+/DeVH1SvyZ:absb+3sP4DeWn1bEH1dZ
TLSH
T1DE03CF31DCA98E37ADF69A88754BBA573EF8117385C40A84C8C96F4E428B44D030BD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c4357452d5ab4fbfe99652da727388ea404b8cfef2f069e122eda731a42ae356
MD5 443c0e20f0095ef770a070fdeede3e11
SHA1 471fdf7a3b4b9552868bb165806182fe01df0a39
SHA512 0f8260c99eae5d398543a61e17fd0135c380ea50dbc0b36cc413f7f659049bfe7e2d0a9fbae36d3e2e714e96aa3df39c745bf8e3469679a1df415dbc77383e32
TLSH
T1AAE00201F240007EC13C0730004316301AA9812606F20245951101647C123501F30ED2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3745382569e47eaba4878bc872d82040b43fd579c58992891dec83914ccc0c0f
MD5 524a5dfc4896ce1e35f546548e1dcddd
SHA1 fb2162629666188e9b6cc515da05614583f284a8
SHA512 38d55c9eddc14fd5925f49f98c960c50f9e2d0a4e47bc5b244955e0a056ae21c86d74287bf38614e1041d004b5619588ee26a8706e5e61961ac5717764fc60be
TLSH
T111E00101E740407AC13C0730446317302AA9916A46F202469515016478523501FB0ED2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4f01b3b1f6d7bdca8e5b3cecaf0c6afc82e2d76a386c2a110a6b11364be0640b
MD5 33bb783ceb328a84fe7033ca727ca062
SHA1 68a01e6e13f2de27be4d5f97b291e516d07f466c
SHA512 3d96a236c015905a0a2f7a47d89a9c5fcb37c3460dbe0be2c457199624aa759e3e1c8e3cbd7b39b8b931e10ba59f90c92c4a27e8d304bf2ffef0ff40a03e1a2e
TLSH
T10CE00100E641847EC12C073048631B302EE8955A46F20A46922501A97C733546FB0BD2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 90b49238446f89083396faa717843ff7b3a02d647602ec0a38bef2076aede368
MD5 1646f97ed9fb3a8e678210d4b6e43c5d
SHA1 c182b04440eaa702d73696d6fa3b0a71a40f49c3
SHA512 cb448ef88d6802e7f23b8dbc0a1103d67cefdb466c614f91070974f1eab402fe9bd52a7fa356e2e44852ab76235fea912674b83d66d92ca6675dbec09594c14a
TLSH
T1C6E00100E641847FC12C073448A31B303EF8955B47F30A46932501B97C633542FB0BD2
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5a6ff1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a6ff1.TMP
Size 392B
SHA256 97848235da54b9bd6c32bcff3425c4c1fbb57871656e01ce57e1bdfaeda19d1f
MD5 562eadeee6dd30ec439dc09cff53323c
SHA1 265d3fc8715fc3e4cc3c4a11e68f6644a8586d21
SHA512 56d4781ac6c8cec5839287f98cf133e6b931db8fff9744808f8b608375b3afb5a9e7d6922d4332c40b7b72d77d68829bb9b7edeffd5d1bc5f7260496dfe34d0e
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
MD5 87299a8105078d6252386ba9d333ff05
SHA1 c43e027b4174d2ae2c7f138de07b18ac0407148a
SHA512 f6678cce079ae97838bf5aebf3c195a2c82d27dd6546fd7e5428396130ca4bd2c809f2d2edca4f130da479624c3418beffe998ae1a032451706b9a47bad62885
TLSH
T1670110D14C3E1AC3C6B90EAFE04717EC40C89512B0D8387818CDF8A4917A41E345182E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
MD5 1a8162cc03c34509f59ea81728419884
SHA1 459f726ff17ed37a212bf5291cc592b4745c3c06
SHA512 129393fb77432dda8e2c4181dc778f609f56572e69213f9f8cffc544b845119929242d41078170b2dc72a678116df340544edb181c2aff069f8cd4ac2a541083
TLSH
T1E8011ED14C7E1AC7CABE0EAEA0872BEC44D86522B098347818CCF864917940E3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 4d2b47e594a4d5d9d0c079c2ff5fac0e47e26ffad46c371ad51e472b3dcd0669
MD5 54b0cf5610d4cbeadf10f35941bea007
SHA1 8bcec79787775ec6c2625b88611eb0de385e393b
SHA512 3f6d82da490f1b52647d9f376be4aa3159f57072ad2b52a048895bf7f53255d860bc12cc4b5af53cf9d9ce8c76cfab722e47cef3b58fa776a8ffd7e991630253
TLSH
T1841184D00C7F1AC7C6BE0E6FA0872AED40C8A622F09830381CCCF964917901D3451C3E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
MD5 880fe67d2d8def8a73d1f09d09f8f2ff
SHA1 adad7fdd0652919461f89bfe36b449081489052b
SHA512 dec205f202a88afbf96f8015158638483f643ad02a9549b9eaef405a32a1ef2b2cf9c9480d70ccb43ef9ce64818827c6fe3cd27267f657cc33cb6ace9619d87a
TLSH
T18CD02B80043D0A82CFA50A5EE41749F810C44918759C197804CDA4D5501A067315881D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
MD5 c1bec3bc77db46888e279f8b3eeb18fc
SHA1 c2d14f387c796193ddc6378267768745c10dae14
SHA512 8d41fbab8134eec1a95a53d4d56d1d2edb1edced5b2f4987278e5b8f6ac9b169c9928a0c52ebe7a66393caddfa5a29e001890386b54105a8e69958661b40ec35
TLSH
T134F09E808C3E1AC5D6B90F6FE40716FC40D8591670D9287844CEE4A8A47B05B311586D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
MD5 80c2dfaf9affc09798a4976ae70f1b0b
SHA1 80daf1112206b189525aa4f5b380fbbba97b583a
SHA512 be5ed753856621e4dc5b64324872539291704bf5d2a415ac993b5f475db90e958544f281ac36d3e17af93c554895ceeaccf6fa9b0839d21c60a38443b2081876
TLSH
T15FE06880883D0EC2EBB60A5FE40706FC40C8491AB498187804CEF899A03B0973115C7D
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
MD5 5ca920f0e1c81dfb329b916e242a4065
SHA1 1d068ad79883fd23c27647c98e761858e46f48cd
SHA512 2b99239123f922883dea3137835bb8b74713799981e5aa1434ea70db85e7666f2372db684f94bb599ecff70c8c31d02286b0587ffe620333eb1d4bbc7feb84b8
TLSH
T11DF002D04C3E19C3D5B90E6EA40717EC50D45517B0D8383804CDE894D07A05E315183E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

0b80ba62-2996-4a53-9ab0-fd98b711850a.tmp

Path C:\Users\Admin\AppData\Local\Temp\0b80ba62-2996-4a53-9ab0-fd98b711850a.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6280_2143544981\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_grubyptok (1).jpg

Path C:\Users\Admin\Downloads\media_images_grubyptok (1).jpg
Size 149KB
SHA256 f9197ec99fb6cfccca9b5ad6af20c455f7e0b5cf15c9baf197164b2e6f7bfe78
MD5 26a2c7b4bddada15f52a82e4b8a1a4a1
SHA1 12d0ffae14529df8e771db4fff4e13b6ba56008d
SHA512 b99c657f18d79b8154752d4c995d8c768bffd6a0358eb5be7c2cff9d26dd2946c59c64fd91d70fe8cb3417dd129d288c474626bebceb6b54d8566cb0c5d469c5
SSDEEP 3072:C2GgAUugk4mxDZnm1u6PMJW+vvRo/tx5vKqR/V+UyTA05ydd:CzLJxDZn2u94+vG/tx5yqZV+UyTA05e
TLSH
T169E3239E1D8A56EB659C3014E532128F76016BF919F460B900B8EFD4EC116ACF1E37AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_jaczup.jpg

Path C:\Users\Admin\Downloads\media_images_jaczup.jpg
Size 63KB
SHA256 25539eb30a24e86165f9611f8c658617a3ab337e6c683ac788d14e7172152ef1
MD5 7625ec198fa4f96f2eb3f48a9792ca98
SHA1 e1b255e4029ecdca97489d39102113fe6fcd6cf1
SHA512 598dfeccd4293990061cdc6117e96ac5d133ad60766fa81431341caa255ef3ac620bc32b7579e9a67eecf78d92d04b11015b3f37aedd1f540a246d066279ff44
SSDEEP 1536:ZQdX/A7u78+wbFOliAYmAWmmKPpI0PK6dc4f:ZQdX4SO8gAYmAHlPKYc4f
TLSH
T1E853025811135693D7C895F0486E6B590A0B39EDB3AAC77AD11939EC13B8C927CF80F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_kichajacyptoszek (1).jpg.crdownload

Path C:\Users\Admin\Downloads\media_images_kichajacyptoszek (1).jpg.crdownload
Size 17KB
SHA256 de9cb9fb63a1639aac155c472ebdbdf4be2adc405624390759f621ecceb71d24
MD5 c29bd8b386bba1a7e8ed0da79f102dbe
SHA1 136679532c19ca2214caf7e9a47d50333da89f76
SHA512 219261fb1b5ff29c559e12fb7a21174474cb0db35f954dd5bc87aa3303c9627ad29c63be38081883a696b4e00cbbebf14aedaf9a035717a5559380bdd1794b39
SSDEEP 384:iaR0pGou5KmWiqaPAiVzANhLVpyEtc8rmq5ObAX8xqackudZ1Eg:lOEwmbjPAidihPzrx5iAicJEg
TLSH
T13482DF7C62587216CDAAC5F10036AD466FA09F76268B3F828D40A2B7D9F87F012D1775
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_lubieptoszki (1).png.crdownload

Path C:\Users\Admin\Downloads\media_images_lubieptoszki (1).png.crdownload
Size 22KB
SHA256 2b9fe468dc52059f3a207414600eeb8d787423d5ea5d45bc5442a8c0158bd4e3
MD5 064e97d007644379c202d10e85aa7b61
SHA1 67de184fe063c2ab06ca40f5704620229cf94e76
SHA512 2270990af3b489dc3928823289a62cdb0dceaffa0e550505dafcb749966302120896832cc722a5a138c675f4cf142ea97ea43e49f4807f0a9e2c9e16082376d2
SSDEEP 384:7gqYvfUrUm/cRqvFKaXnq9CdXa0zXOB+100Fmh3HcT3jFfVrqHeDjGq/1bbbR3yd:7g+UCci3qqTXKe00FmpHcTbrypgb92mc
TLSH
T114A2D14564BDF163DC4FCC1E3CBFA3927A9BCA2CC8A098518B418D0067C59B1BD27316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_ptakwspodniach (1).jpg

Path C:\Users\Admin\Downloads\media_images_ptakwspodniach (1).jpg
Size 46KB
SHA256 1480e09300dde94453bbf45950edbd2bcee237629c59c4930ae3dffa675ca75b
MD5 9987455160273726f5894678429d5abe
SHA1 5291675ba62eb06953ea2543d139eb8d8ba1dd4f
SHA512 75086a0cd7c6768c1a004871ce73e2da80a4b8b55134a881729b81067610e5fc61b5db5d9f4c1840a55f7fa74a782a8d3e33df10cb37c3d50eb6d6a560e1ae1d
SSDEEP 768:/yJ5hj4MA0IAdPvTlCX3QF58j+Tnupwusb+Yq47rhRsuD4SUtJNpe1qkw62fPW90:/yXN4M7dPvqQr8jIupw9bVq47rUSUtJz
TLSH
T1B92302ED296162B0F4ECAD04FF030E4A31EF8F26265B6203D0E81E29E5263E9375574D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_ptiszka (1).jpg.crdownload

Path C:\Users\Admin\Downloads\media_images_ptiszka (1).jpg.crdownload
Size 10KB
SHA256 619a41865dbdb6f37d8e6fed65a128b2f3791ede35e8ede22db60fb0f2dcaceb
MD5 fbc857e1bdb52d3fc0a7f28d27a28e02
SHA1 c11b78f2b6c24bd095078c8b6cf202b4ed00f5ec
SHA512 c44efed1c902ca686109b01c7f4b47ae27b921c63da811d73c1ec7d4c48e0277833e5ced2989a71a404cedcf0e643cf7be22c14b9fc72c13581ed940a452b396
SSDEEP 192:bPl6pgqEMbk2ZV9yNB+2ShR+7Vi990k8g6GbBIF5J+HD+fIDvh:bOJHZGBFmYZigyGF5EHqfM
TLSH
T14522AFEA73D04ADFEE533631692C49AAC40AEB5173627A7EE1BA451654C03F88D30869
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_ptok.jpg

Path C:\Users\Admin\Downloads\media_images_ptok.jpg
Size 4KB
SHA256 7b4efa4e224f9a9befa780cab54fc03cdc1bc6d90d78dda68856c1b91e26b9b4
MD5 0d9406f22c33746ab08f2ae809c4e029
SHA1 f85811fbeeb303d78ed6e029593fd80ab0c15ce4
SHA512 5d047ce63a638fa81cc526be6feb755a53a168ffe03abf602d5ab084bd3b89c93e05bbe9edf4bb42c0f960765d264272a29bdd44d1b4b1b7778171ce9fe4edf2
SSDEEP 96:dQszMUDxz6e7+hHHzga9UQXyfAJs7k24vIumbJcD1ztj:Hfse7+FgLIE2klSmbJs11
TLSH
T1DEA15B52B9D119B1CEF89F36937B9C48C7762365CA44C601F82B9AA02C981AE8DA8D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_ptokzjajami (1).jpeg.crdownload

Path C:\Users\Admin\Downloads\media_images_ptokzjajami (1).jpeg.crdownload
Size 63KB
SHA256 78641a7c60d94958af90ff35f315f16f03cd7b12315afaf666d67901fa36e6db
MD5 3de185f7cacd59a67bfd65a34f0d6c30
SHA1 f4b642e4beeadc4501cb25fe39ba30b5c0b1642c
SHA512 51c2d71e1303b3123e8a6afd2069e847d1c432e46dade54cd6c5c68b9ff3d3ea04682ecf8feca2a56bebff8f77b6b866b1ff55e62bcb2cfd8fd6ac885ac3febd
SSDEEP 1536:slnbjiEJ19SokpB4FjBAl+sEBYjdB/Hnm0LJnW1aWyrRINb:+bjifoEB49BAlTEmjddHmuhWkWGWb
TLSH
T19B53027D00382286BBF7DEB4D51388A2F139E2155CD20EB44BAA4DE2F297DB8352003D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_ptoszek (1).jpg.crdownload

Path C:\Users\Admin\Downloads\media_images_ptoszek (1).jpg.crdownload
Size 27KB
SHA256 2bf3b01afc66b991275909dae575ed1185ac3356d537844fd4f0cd9a1804fb97
MD5 9e4b1b3e7c52e090c8e70df1a98bad85
SHA1 f4367b1f35b1032f0f1112e7af4c016a52a033bf
SHA512 753dc9f3329b8630baa22b0a513e5d659b2c9ed0ecd62894527dc37c03ef688f27368bc342766b6aae10755d11277c466e409b5a677428779df89b0f1db68e5b
SSDEEP 768:9YyaRnf71mZ73n+tmDzzeCl10cxA/Pul/Lbtygpy:9uf8Z73n+te3X0cXD5y6y
TLSH
T110C2D0B6A8DA4723EFF3E03006B537486290772EC6945EFEE194875400B08A666DD0FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_zimowyptoszek (1).jpeg.crdownload

Path C:\Users\Admin\Downloads\media_images_zimowyptoszek (1).jpeg.crdownload
Size 221KB
SHA256 8925047466d708bf7bae0b1ddf70c302790f4388b2c747a03fe769e8eb8da39f
MD5 d022efd45e61d3834c4c04d1592ad8ed
SHA1 d021d763e742b2e859d5ae2a6be10615bc65c198
SHA512 c80b5b7f29eaf1c7c9a78661cd055b54316ca70bef6737e11468bbc66bcca1eb7fc05ead65b238094aa026e854f16fd12f3384818342586c3cc2f6814804e917
SSDEEP 6144:AByITd5c7FDEbRk5cY9oc4IIKV9yCt4+Vnw1ni8d:AI+iSlj8NfV9r43ik
TLSH
T1AA2413F82B073168A580FAF0952A496C70DAD9C1710EDF1C6557DA7878E1FC1CDB2ACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

media_images_zlyptok (1).jpeg.crdownload

Path C:\Users\Admin\Downloads\media_images_zlyptok (1).jpeg.crdownload
Size 8KB
SHA256 f31abee6629248b05f89c5b8d40f3180f207c0b5263a1dccdbcb5a9b65f27a8f
MD5 abcd67add008164a9e8a6fdda7c44110
SHA1 9dd2e268b07b080a6c18df73d5313e4b8ca1ef0e
SHA512 d3d55e8cbd198bd3c5c7d76e47774aaa347413ddae78e1f17cfccb2c99ce6ce1392a9747b551d526fe272a12ba6c7a5819d6edb5df9f7c3643bcc0cc70e1c23c
SSDEEP 192:5ZbHqTUzxoIGup+pu0ZhGuy/13VwwjIkoxG:XjquGdAX0yuY1i7G
TLSH
T14402AFD36E66C31AC7C8FF6B44812C8DED0307D738996B58A6EC422515351696A0D89F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6280_703544643\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

FaceUnlockManually.etl

Path C:\Windows\system32\LogFiles\WMI\FaceUnlockManually.etl
Size 324KB
SHA256 52349224b82a8572315f9272e53c6ea839a5a61f2b6740617ebc17409913b6d6
MD5 d7f84c6d7770e8563d1134dc67a2a127
SHA1 523cf4824f17025205155f69c0231611465f1d64
SHA512 d886e81d13326f1c21bf630830bb435e2c5bf32ab8d5026b5a4b2b552aae7fa9e46aa892a7288ba81a241d0c1db88df46286a0fe7fd100e8a3e66eff266976d3
SSDEEP 1536:/v3X0FN1XldJT/RpGi9kbLZKsSO6uDSc0kzgxiFwRxEMZSJ:nBZKsSO1F
TLSH
T1EB6433F5445C1859DC6D28B8FC2B1FA559932D8705814E364BC2BB39ECFFCEA8E40998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FaceUnlockManually.etl

Path C:\Windows\system32\LogFiles\WMI\FaceUnlockManually.etl
Size 336KB
SHA256 9f26f27d247c50d60c84e06d7e5d6eed3221ef787e1d4ba2519b1d25293b6d9d
MD5 77757bd37248e4937709b17be375c417
SHA1 db5860597f6b87d6a0f7cf801e44079a227ce4ad
SHA512 9a152ed762256fb9f33d32453d888415679ead1049f4672ae65ddef16f1ef7997ed16f0f0e255216f9c7dec93959e2f2191a0d9564518fae06663ab39283372c
SSDEEP 1536:8v3X0FN1XldJT/RpGi9kbLZKsSO6uDSc0kzgxiFwRxEMZSgr:iBZKsSO1A
TLSH
T1B97434F5445C1859DC6D28B8FC2B1FA559932D8705824E364BC2BB39ECFFCEA8E40994
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/5924-1113-0x000002308D350000-0x000002308D591000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads