hxxps://steamunlocked[.]org/

Analysis

user interaction
yes
max time kernel
699s
max time network
701s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/08/2026, 16:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://steamunlocked.org/
Sample260817-txrbvsvbph

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4072	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314576298310360"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{FB94A148-7159-49F8-9E42-370BF7F64422}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{A53361DE-976F-4F6A-82A4-F2421BAE6DB8}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
660	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe
4308	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4308 wrote to memory of 4116	4308	msedge.exe	85
PID 4308 wrote to memory of 4072	4308	msedge.exe	86
PID 4308 wrote to memory of 4132	4308	msedge.exe	87
PID 4308 wrote to memory of 2796	4308	msedge.exe	88
PID 4308 wrote to memory of 4132	4308	msedge.exe	87
PID 4308 wrote to memory of 4132	4308	msedge.exe	87
PID 4308 wrote to memory of 2796	4308	msedge.exe	88
PID 4308 wrote to memory of 3288	4308	msedge.exe	89
PID 4308 wrote to memory of 1656	4308	msedge.exe	90
PID 4308 wrote to memory of 3288	4308	msedge.exe	89
PID 4308 wrote to memory of 3288	4308	msedge.exe	89
PID 4308 wrote to memory of 1656	4308	msedge.exe	90
PID 4308 wrote to memory of 1656	4308	msedge.exe	90
PID 4308 wrote to memory of 3700	4308	msedge.exe	91
PID 4308 wrote to memory of 3700	4308	msedge.exe	91
PID 4308 wrote to memory of 3700	4308	msedge.exe	91
PID 4308 wrote to memory of 3424	4308	msedge.exe	92
PID 4308 wrote to memory of 3424	4308	msedge.exe	92
PID 4308 wrote to memory of 3424	4308	msedge.exe	92
PID 4308 wrote to memory of 4792	4308	msedge.exe	96
PID 4308 wrote to memory of 5016	4308	msedge.exe	97
PID 4308 wrote to memory of 4792	4308	msedge.exe	96
PID 4308 wrote to memory of 5016	4308	msedge.exe	97
PID 4308 wrote to memory of 3984	4308	msedge.exe	99
PID 4308 wrote to memory of 2916	4308	msedge.exe	106
PID 4308 wrote to memory of 4880	4308	msedge.exe	107
PID 4308 wrote to memory of 2128	4308	msedge.exe	108
PID 4308 wrote to memory of 1724	4308	msedge.exe	109
PID 4308 wrote to memory of 1724	4308	msedge.exe	109
PID 4308 wrote to memory of 1724	4308	msedge.exe	109
PID 4308 wrote to memory of 4656	4308	msedge.exe	114
PID 4308 wrote to memory of 4656	4308	msedge.exe	114
PID 4308 wrote to memory of 1672	4308	msedge.exe	118
PID 4308 wrote to memory of 1672	4308	msedge.exe	118
PID 4308 wrote to memory of 1672	4308	msedge.exe	118
PID 4308 wrote to memory of 1804	4308	msedge.exe	119
PID 4308 wrote to memory of 1804	4308	msedge.exe	119
PID 4308 wrote to memory of 1804	4308	msedge.exe	119
PID 4308 wrote to memory of 732	4308	msedge.exe	120
PID 4308 wrote to memory of 732	4308	msedge.exe	120
PID 4308 wrote to memory of 732	4308	msedge.exe	120
PID 4308 wrote to memory of 3820	4308	msedge.exe	122
PID 4308 wrote to memory of 3468	4308	msedge.exe	124
PID 4308 wrote to memory of 3468	4308	msedge.exe	124
PID 4308 wrote to memory of 3468	4308	msedge.exe	124
PID 4308 wrote to memory of 4336	4308	msedge.exe	125
PID 4308 wrote to memory of 4336	4308	msedge.exe	125
PID 4308 wrote to memory of 4336	4308	msedge.exe	125
PID 4308 wrote to memory of 4284	4308	msedge.exe	126
PID 4308 wrote to memory of 4284	4308	msedge.exe	126
PID 4308 wrote to memory of 4284	4308	msedge.exe	126
PID 4308 wrote to memory of 4240	4308	msedge.exe	127
PID 4308 wrote to memory of 3616	4308	msedge.exe	128
PID 4308 wrote to memory of 3616	4308	msedge.exe	128
PID 4308 wrote to memory of 4696	4308	msedge.exe	129
PID 4308 wrote to memory of 4696	4308	msedge.exe	129
PID 4308 wrote to memory of 4696	4308	msedge.exe	129
PID 4308 wrote to memory of 3232	4308	msedge.exe	130
PID 4308 wrote to memory of 3232	4308	msedge.exe	130
PID 4308 wrote to memory of 3232	4308	msedge.exe	130
PID 4308 wrote to memory of 4884	4308	msedge.exe	131
PID 4308 wrote to memory of 4328	4308	msedge.exe	132
PID 4308 wrote to memory of 2824	4308	msedge.exe	133
PID 4308 wrote to memory of 4328	4308	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://steamunlocked.org/
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x260,0x7ffbd8d7c188,0x7ffbd8d7c194,0x7ffbd8d7c1a0
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,2772755544941798322,7258149253663203145,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1780,i,5089624908900205701,99717450125786350,262144 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:2
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,7986856619910045208,17166832482856259660,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,13423505934105580465,14275279446968431554,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,3725941238840290698,10194087272228663982,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,3702452707467855244,4346207472616816143,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,4014676896368705188,1012415555108245141,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,3744426641115285505,7602519139917068604,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,14056893751408944024,3875789323591335882,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,14368379041715818807,12485297422681735221,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,14368379041715818807,12485297422681735221,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,15363170487244089080,7350572686476131336,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,14279219182587575564,2978136799826352703,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,5520217126675202166,9789064031811512496,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3664,i,17764314538283721783,844846040807691873,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,15496460162207159154,9401842943167563528,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6424,i,16090263516268131839,3153164837990069091,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6612,i,8152376437699928075,11963604003579110892,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:1
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6724,i,3920537125089440320,14809146380992961094,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6736,i,8296908370263418362,7919246672671421909,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6736,i,8296908370263418362,7919246672671421909,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6736,i,3858350974657124192,7133617327028749562,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6988,i,7267493381680300337,13178083084236268118,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5068,i,3147466700904401316,2111014818347140410,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,6984595048082740963,2431108246585864822,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=720,i,8672562155483214612,11543149600595137305,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:8
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7108,i,8055972985160370422,14306000691313350757,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7588,i,635615692648610742,8975194628880033923,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7580 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5028,i,421316189687054806,12514703465834634247,262144 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3392,i,57392403969166579,12023608758933233475,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=4044,i,12901870278650013928,15068243804272688091,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7280,i,15385937653518651674,7959745356724082668,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7508 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7596,i,91578013221844849,361194424396827943,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7712,i,13268394743992616845,678232454506567253,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7676 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7936,i,10065921943324831632,1704655823074528003,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7956 /prefetch:8
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,7350609761422515050,5186245513056359288,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8172 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7252,i,11990495868248864760,14117669840190809092,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7500 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=6504,i,17573176136453596970,11008614044454002417,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:1
  2⤵
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=6860,i,11877799261181475225,17851538940648229727,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8496,i,3903479046383273607,5644744720608599294,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8508 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8368,i,8534699550545718896,7222906899316201786,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8324,i,4881528760959442413,13392391304524863204,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8472 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7764,i,5706366392891899375,16058700520019567399,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8544 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8276,i,9211237045104599387,3673732735359888705,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8316 /prefetch:1
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=6632,i,1188160183468343461,3984026440498573884,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7196,i,16893157450151269151,17762224023326001339,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8484 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8452,i,13126561704531772117,3922636755565177056,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8468 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8168,i,854623289376813320,3672731147145772786,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8816,i,305191408292527012,15522813520031076688,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8968 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9144,i,10953094035918952772,14835567732609967178,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=9112 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9108,i,6580127600353259482,17854305563417711231,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=9284 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9416,i,12406239927641180396,3000772645334467904,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=9424 /prefetch:1
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9572,i,12700598772285701149,15412142501208528838,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=9444 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9712,i,12124444183040995076,12302194595951295074,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=9448 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9844,i,12069001952051883506,2183532350838578332,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=9860 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10028,i,16917267007853245235,9173260640310774714,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10016 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10180,i,5437656601124798369,13818047625186934650,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10080 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10316,i,13499626404158578645,16763219347423720531,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10320 /prefetch:1
  2⤵
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=10464,i,8059210715548773288,2226623826251805212,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10472 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10588,i,10301457577176936006,16053080941408385026,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10608 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10628,i,16267931745870865613,10840849211470051346,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10736 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=10768,i,17104705126521425269,17186352016003760642,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10876 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=9404,i,17145820802284001798,14902335286878702452,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10880 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=11388,i,17557334303085574007,5035456441688316069,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10592 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=11472,i,5932961061254579090,6251915558335401221,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10588 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=11724,i,16137922052131317220,11152286151844772164,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11732 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=11832,i,5500379205684987460,10817295984584550267,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11460 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=11976,i,18297855902263289070,4558541051329321283,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11988 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=10784,i,10013336816715287136,9024747692760716246,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11588 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=10924,i,14659683427071725725,2727952877809545981,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=12160 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=12372,i,1118148011765828271,12533070583234664004,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=12456 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=12584,i,2562417229726085018,14044261084967433743,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=12600 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=12728,i,10488602986934300544,1435744236414154825,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=12740 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=12784,i,16732470832585870847,18347440684841695209,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=12884 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=13016,i,16513666666194641144,313205047018468532,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13032 /prefetch:1
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=13052,i,1669415428152127472,12724362887321556282,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13188 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=13208,i,11101823907217061442,5046336884501342878,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13336 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=13240,i,11510243881903040805,4486126272564638243,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13340 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=13036,i,4107966090669675725,5756337624882619976,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=12168 /prefetch:1
  2⤵
  PID:6240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=12728,i,14920254790479756105,6251952721358292882,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13744 /prefetch:1
  2⤵
  PID:6248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=13644,i,1975620331618635242,974688559194118981,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13856 /prefetch:1
  2⤵
  PID:6256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=11228,i,11052678381192639604,8688612728362452918,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13600 /prefetch:1
  2⤵
  PID:6264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=14028,i,5605236188587638125,4037775930646495478,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14036 /prefetch:1
  2⤵
  PID:6272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=14184,i,13020266179482821628,4326076404796821384,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14080 /prefetch:1
  2⤵
  PID:6280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=14316,i,9168190138211124140,12759287251435336519,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14324 /prefetch:1
  2⤵
  PID:6288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=14460,i,18094276259356325561,5492588219856822867,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14476 /prefetch:1
  2⤵
  PID:6296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=14604,i,12445892929331118803,12601958206437766014,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14620 /prefetch:1
  2⤵
  PID:6304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=14752,i,2848010284445807105,17316446816675308792,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14760 /prefetch:1
  2⤵
  PID:6312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=13408,i,7918091702754126681,16248091005194951913,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14628 /prefetch:1
  2⤵
  PID:6732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=14020,i,1379443393160849881,10856457139274687115,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14460 /prefetch:1
  2⤵
  PID:6752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=14904,i,13564410052945786034,15006532301377167265,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15260 /prefetch:1
  2⤵
  PID:6852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=15412,i,5268658245280259722,7192462137131989385,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15424 /prefetch:1
  2⤵
  PID:6956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=15016,i,7970123423155515318,4157694496643538615,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15004 /prefetch:1
  2⤵
  PID:7036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=15620,i,7658121947327751193,15541204639782946631,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15648 /prefetch:1
  2⤵
  PID:7096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=15816,i,11881323465689538955,18245338587834972025,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15788 /prefetch:1
  2⤵
  PID:7152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=15972,i,2887537690875635493,7697818734119484403,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15960 /prefetch:1
  2⤵
  PID:6728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=16116,i,17565116552449425641,5803324688149342739,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=16128 /prefetch:1
  2⤵
  PID:6984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=15256,i,14872703593339380767,17130461981316298425,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13608 /prefetch:1
  2⤵
  PID:7364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=15992,i,7931868025272140196,1020946717496386279,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15688 /prefetch:1
  2⤵
  PID:7372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=15696,i,5545140299481838375,1636235253110747431,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15968 /prefetch:1
  2⤵
  PID:7380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=15748,i,5673726780555926802,15900997435081190261,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13416 /prefetch:1
  2⤵
  PID:7388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=13516,i,5009229332278137847,13339726774408125112,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13584 /prefetch:1
  2⤵
  PID:7396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=13580,i,15759096182221083107,6351155140219952869,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=13128 /prefetch:1
  2⤵
  PID:7404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=14864,i,6181904268194145677,13217651151867546147,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11788 /prefetch:1
  2⤵
  PID:7412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=15096,i,3138962846482034743,901004965277946373,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11828 /prefetch:1
  2⤵
  PID:7420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=15048,i,6670390525669521310,13498110720125578791,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11748 /prefetch:1
  2⤵
  PID:7428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=8612,i,10997185858354449640,9059312604611119658,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15156 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=9420,i,17353937601705769498,8873991789863635946,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15092 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=11348,i,17144442864589818570,6972762430332220343,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=7956,i,13825460857722483435,6464907281255580371,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8596 /prefetch:1
  2⤵
  PID:7776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=9084,i,7885202196015840953,4397347400375933532,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10476 /prefetch:1
  2⤵
  PID:7448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=11072,i,14185868885660573301,4539882506904154176,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10580 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=15908,i,14900649268109222702,17295182905775983143,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8804 /prefetch:1
  2⤵
  PID:7316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=7952,i,15641217987604337090,18033860234735582460,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14460 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=11020,i,17627225908902311937,17017699366971154506,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11444 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11404,i,2434576554628275007,18307081437973519558,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11392 /prefetch:8
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=15276,i,11925399444718518890,17891427727490438523,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:1
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=8004,i,18171115938116753154,5657588623529448358,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11636 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=8596,i,17458867863566221430,9531638734694204474,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15580 /prefetch:1
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10508,i,11797978837694055087,14241632933972606596,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15056 /prefetch:8
  2⤵
  PID:6820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=13112,i,13419785951138451101,4794920534798454778,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14936 /prefetch:8
  2⤵
  PID:6920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=11692,i,10697899363365139383,5204091251032376032,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8480 /prefetch:1
  2⤵
  PID:7100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=11768,i,11863327659638954049,17533059571634575718,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=9280 /prefetch:1
  2⤵
  PID:8132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=15592,i,3594150713325854982,11245926746389243229,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=9260 /prefetch:1
  2⤵
  PID:6476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8828,i,5908637826189244914,6354736752854137490,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=9248 /prefetch:8
  2⤵
  PID:6520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=9232,i,16379001148640806501,5847172899028212284,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=9168 /prefetch:1
  2⤵
  PID:6652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=11204,i,3518474470060598980,4753370353684060083,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8032 /prefetch:1
  2⤵
  PID:7600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=9172,i,13733168974034009180,2639951801081914712,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=11460 /prefetch:1
  2⤵
  PID:6300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12044,i,11027316582454815122,15167109014111502319,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=12248 /prefetch:8
  2⤵
  PID:6352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=15844,i,2280758683231796600,3579060207463132081,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15864 /prefetch:1
  2⤵
  PID:7140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=14872,i,13887184334702144303,9236122438595386590,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:1
  2⤵
  PID:7616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=10576,i,10509420959698137070,12304426587360234000,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8408 /prefetch:1
  2⤵
  PID:6888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=6756,i,17772482789165613668,14081436010915780241,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10440 /prefetch:1
  2⤵
  PID:6860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=10380,i,4856353718616354710,9801614582754775079,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10388 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=7100,i,1239883897518739458,7929210688692423157,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14752 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=7548,i,13871951533980227610,10407353975541923980,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8220 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=6216,i,5543645748719958470,11374151842826502892,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:1
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=10400,i,8812772977212455151,13113254364928510006,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15860 /prefetch:1
  2⤵
  PID:7952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=11320,i,6167455020993962008,16217442250533869647,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10528 /prefetch:1
  2⤵
  PID:8132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --always-read-main-dll --metrics-shmem-handle=7092,i,1155549113872495392,5131893534329587084,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8476 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=11796,i,9737785648455210686,11700323502739886190,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:1
  2⤵
  PID:7376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=13604,i,983670201732326124,7803467645995811896,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8772 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --metrics-shmem-handle=13416,i,16876262120319154556,17434300308141724195,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15164 /prefetch:1
  2⤵
  PID:7716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=8704,i,47704922289962557,14065961706663686107,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15864 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --always-read-main-dll --metrics-shmem-handle=9772,i,11213691960687163049,2749737893621342582,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=15664 /prefetch:1
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --always-read-main-dll --metrics-shmem-handle=14636,i,11824386959749790661,8660085053117991324,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12248,i,7893042727118581182,11740962681216079909,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=14736 /prefetch:8
  2⤵
  PID:7280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --always-read-main-dll --metrics-shmem-handle=11312,i,3710762671045459053,11677817655218208242,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10492 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7848,i,8492632147744599649,13121019458924279937,524288 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7668 /prefetch:8
  2⤵
  PID:7736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --always-read-main-dll --metrics-shmem-handle=11356,i,10942340288944015784,13382719758340848427,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10576 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --always-read-main-dll --metrics-shmem-handle=7160,i,8259911676135769931,6347958487681759004,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --always-read-main-dll --metrics-shmem-handle=6004,i,834570105015503129,18017354633993501379,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=8232 /prefetch:1
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --always-read-main-dll --metrics-shmem-handle=10168,i,7707486506084664819,11222697299905363267,2097152 --field-trial-handle=2828,i,1363747682256339180,16565429530664481170,262144 --variations-seed-version --mojo-platform-channel-handle=10012 /prefetch:1
  2⤵
  PID:4456

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4268

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

53085ee5-8193-409c-b1f0-42d959ebbf83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\53085ee5-8193-409c-b1f0-42d959ebbf83.tmp
Size 392B
SHA256 b06f0e7413fb203f8561a604ce56dda2d8994eae98f66e8eb33c486d715218bd
MD5 362afb601f47e90f52140d89ae88d9ec
SHA1 519072ffe99597d325e51d1085bd813b75629ae3
SHA512 9a81f2cf9dc7952f566a65350d53e4abd7ff8a2b7eb177f5cbe4504619f6e0df005695a66666caff6edd114a4fb5d7309bd6973c98d4842e0a8ce0fc1af5d402
TLSH
T145E04813D36404BBC0A9033501CB2BA03AB291261BA3021A4B20923879623813E38E80
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 7d3a97401369613dc9f66a3382c197fa26dca54ae0079e69c066ee9f5d863d41
MD5 07c9213cc982d0ff7fba1656eceadaa3
SHA1 ef6e61dc53fd84f06757c460d3772839de9b2cba
SHA512 0e71782305aef1a9cbb9460bfcb504a2ee08fa41f39d20524a8c0ff15bbbd6e56b2da1fbfaf91bdeeac7733dc839ffd7d7e93097d1142c51343a88bfdcbb1f11
TLSH
T126E026C514CAC23EAB486447916C530CC2C1372B93CCBE9E1700C8897603850E6C77A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 818aa998883f51169ba3bf79c2ec3ecfec73ba30038d679dd15f6f927697822c
MD5 43b7f25f09f2917b1caa63be93267ce0
SHA1 5f44017bbe5a87c78f80b8acfee545b22f340bbc
SHA512 f179430fd0f52a8bd7f4ac0c3970f6f2c5e3eea666f50c1f0de6e52d9233bbc0762f8d333029a1f0c367cba079ae1f9c9ed8e449830ae5e3ff91cacdf1c04561
TLSH
T1B0E07DF505C8C77EEF4866575168538CC2A0364BE7C8FE1E770484C5B603840F2CBA90
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 83KB
SHA256 7d40765179bc45d7b2a36b9f0d49d12c2048abb154ed0ecfaa2433417fd0cdbc
MD5 95ad70b0720495f26f4b7dc7aa152c13
SHA1 d325d177460b579980d6b36a4da2defbc709d6ce
SHA512 ca9f7e4fd11ce28a5eacee9cda062c8418b4d6cb440ed82328c03d7c1d1835d7aa175a2ac5e35ce2ec3ab6a37ed2fae0bf2eb61c7b08199299b6dae9e5194fc6
SSDEEP 1536:29P/RzSMd667XkZMMts0KAYxxuADuwcF/0ApNk:2ZRu+BeKZxceuwOtk
TLSH
T1EF83EC8423927D0B62FFA7139C3EE9CAACBD90A41743A407D7C7F699DAE91C6C301558
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c8
Size 68KB
SHA256 fc70b88dddb2da85326b7ff7e1fa801f0099e5c0d3a85863afd2737af9b199a2
MD5 cb3d1e69fbf9c94b15e92f2fa26892f0
SHA1 b8e5aff1547d49a1285e2e0c4cb43dcd9993f468
SHA512 0f890af69b223aaec8bbc753bbc626f6cf0e0660182e38871a03337f1eec7be6b47cb9d5034a3cb8c226feb6cd964d396f56fecf07257f3cbc13de642c175ac2
SSDEEP 1536:1RrPSv8UR94fNhLVxko8PojNVcL7tk9/yGeJ3GI:PPZGefNhLVxko8MrcL7fJWI
TLSH
T16E63026A7FAAA437FB2C87016FF23034D1F8FD579034042826515BB5A4578E92326F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ca

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
Size 38KB
SHA256 3370f2e33b0f3a2dae282f78a6bda56adacc76aaf06c7b388db4fda41b90b92c
MD5 b06c7a8dd8ad214e1f952bfae09f9301
SHA1 a0ab87119773fcc0720f1732763c28db8200f802
SHA512 9755d8ce26ab5b0d2293f00285d2334dd48e4c1b6f78a452758821133bd3d7aa3c8134cb2fab12eebb7120e00feb0b719cacacea7c12eb977c937d5cc50c4c43
SSDEEP 768:MS2Glq2FZ5dIEmd9C/imy3NUm07IARvRqLI:dSYfydk7IARvRqLI
TLSH
T16003F12EB1C51EAC510CAB3D92B74368952353063E6952F08DC297CE8584BD06AEF3F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000dd

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dd
Size 22KB
SHA256 5692ece54db78aba10f61390490a8a0a6c5644f059b260cf1859e742e00886e7
MD5 233dad47535c14aeba283168f8f8770e
SHA1 e05cf61ead67fc4816782fa2d8be81f93dde3539
SHA512 aaab9bb9f19b1389354ef1695992de7e3de6966730314f98ed7c466c681335162f06e023f64c7f4b5ff55ae9cc3c2e785eeeeb20ca2ce44de787e3b809dadba3
SSDEEP 384:iVYi7Yfafw7f+yx/76AxTbT6yeqzPQwTpqE0lpXt6UlRgL2cfkg1L:KYSoowSAtbTwo4plpXt9wLkGL
TLSH
T1FFB2D1583B7BEF88F639A709E1D95121B94779E0B9DCBB6F209F02152511022E3880FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e4
Size 73KB
SHA256 6dbf4ce8bd7984da3b3dec2833e8107b11b10aa56a537a2e23284cc52a2d9ea9
MD5 86ab42d92e8aaa951eed274da507ad23
SHA1 311714e51063b0fa75cc3854c967f6a1d7ceaf10
SHA512 8272707b178435da9ec5a970dbfc34f76d6b0b0cfbdfa0fcc7c068507e0681318916ec3aecdd2f3227b153a5285bf1a4b9ab367ce2670223a925bee6e56ef655
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwpw3vidG7:mj1h9rIHApCReO9vWR+V317
TLSH
T1B17302C63DA8481B07FB429B47D08C556C2AB3A5CB7559446FB81C2CFEAA427132E58F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e5
Size 23KB
SHA256 caaed8bfd99de066ebda9225d0a37fae9058d4293a6f884d049fcd7e8109bee9
MD5 e6e582a56baefb3b457254966ca15021
SHA1 adee7cff52ed81abc85cde7078fdf1eeadc38ef1
SHA512 a762f861e6922f78a60a59d35c41e9aa4c2fc8a7c59ef47c3a922cf485db1d2b354c9c898ebc7ab564aea4d3496d9462f2f6cd5ede769fb899a841ffbeb9f98d
SSDEEP 384:+4Mm3p5ikxHT41BTNM1PK41FzxYtu4weVGgBNHLMSIBmlvFi9dn8T+qfI3KshI:xMm3p5imaQPxMUe4QxxFi9yI+
TLSH
T131B2E2424C78F24AF220807D76F1A18DD43E51A47A581B7E78C4FAF54C0A292A9F994C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000e9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e9
Size 47KB
SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
MD5 dcf31ebe107435bd68e0164d59e19b87
SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
TLSH
T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ea

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea
Size 21KB
SHA256 151dd6171d7986fb905a5f0487ff272ac7993d19811d817ff1fc7471bbfee6ad
MD5 3ecae7ff78465c4bdb52977f083f1510
SHA1 c7a371cf5eb0e9d757254b0f78e429f61ef562a7
SHA512 a7570ca40c09786e5b85d55fb1130cff307762a97d25196b66d2aa082831c662973c60886bd3db96753de2a33ce28b57c9b29cce1520a9b5539b26f7e40ddff3
SSDEEP 384:QrugOBuYJcpM5E0zbmm8zetsxpvlBBGNIH/1b8UdUVWWH2Fhl:EuZsfoEJmeeq17Euf1b8UdUVWWHMT
TLSH
T1FAA2D09BFA830D40C8AB7B6AA62F0D8B1950E553F176BF46C49871AD58BC491B302D3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ee

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ee
Size 23KB
SHA256 0664f4f3b32f453ccb2a546b580bdf5386de38882e408704a60288b8fdfd6ed9
MD5 9bb97fbe9e200570ca3b5582a9c3a42d
SHA1 d1d6aa62d1c3314891c27a3bdc35c374b15bd158
SHA512 00a0f245c219696679ef4fdcf2702fe45d720d5c15476372c7d6377e31f68f9683144dbd85a47c633f67203c1342b3556d757ae4bbc92a6fa5dfc8475496ff77
SSDEEP 384:z0p6/TKdJGrCTTvGTjJzNl07kco3lVYQlFuvAj+hg1k0/ncvxoUBw:z0k/OdJGefGTFz0HkzP48aOniSUBw
TLSH
T133B2E192016CDC18B002B8E53FFA2E46F92D5110749A71C7D0627CF6F9C9718E7CAC24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00011c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011c
Size 16KB
SHA256 b7a5fc7ee10aa7f5434e737c7d53e4b5460c9871d12b8ed3c22a8b7fd31314b1
MD5 e9165d97b67737c665566c864a176a88
SHA1 1fd8916ff059ac5ecdb480817244aa182e7d89f6
SHA512 a3a233c61f04a76b501ce2b63ca8d222f38d5942b88a789138b57829a9beceb80e359ce38bd92062bde51d3dbcf295ee0ac21e4ca6c713da551688d7d549f2d9
SSDEEP 384:wDfRheOh8Yu/rp2CZMQpIgayWkL7KYpjrcJWG5Vycsvu:wDfa68f2AMQpI69L7KAj48Ghs2
TLSH
T11472D0160C1CCC92ADD299029B469A95C7DD74978EF77FCD98582A34422F8BDCEE20C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00011d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011d
Size 529KB
SHA256 7f7c11067182f3578e5f7cd950152c0930a78278d3b6dd6046c3f0ac8cf4c996
MD5 ad705b877a6e386742b223285aaf63f2
SHA1 d883911a0b1c1e7bd00417418a12130ce3723999
SHA512 fc12eee74d976982880441009e0ffe89ad7f555367f9bbd4ad5074950e013891d50094000b5256376d7aa8cd70de58241ceb7e579c84fc1f4b1aa1f8db5e1489
SSDEEP 12288:VLgqtX6CyLfPmwXWNqjzuB7tOXir4oanEErrIALBREhCo:pgMqxyqjzotuYojBiCo
TLSH
T1C0B423947F2B4E17C8BB237E11CA5B436BF6E2160B4683771BB971600C857D78E826D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00011f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011f
Size 279KB
SHA256 2ff700e9844cc090fae15bf158e49bd4d56396947b527ecdf069bad7c44009bf
MD5 4f4efec7eb6ae9c6f456d2c35e747ca2
SHA1 e7d819c2e13660e05b4ec712749c5ac3cae69e72
SHA512 ae19909db60f680765cff66bf4f04168bf867ce597d50ca245caa84816dddcfa68ff28aa626b329e144380709d37c397f3120d2167b9bca893b46195557f1593
SSDEEP 6144:gS6lFVqGD+U5l7rzKS+3X6uQt24dZbmdBoWBg5X6wNFW3Ub:lWPqGqUvrzKS+H6u54BqwNF86
TLSH
T19D54230E598B366F20303B77632BF595E18C017D62ADCBC81AF3ACC176E67E625462D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00013c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013c
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001f9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001f9
Size 184KB
SHA256 75799b61c8d93b46365ae3a603ef508acee921adbf2abf4ada583fc4e0e4bb82
MD5 8abfe6dfa7b0d9a5a4b7268155054740
SHA1 fe841d96c94923c7732014a81bcb574fe2c10584
SHA512 a6a475c64d5e0bc3cb94bd38b38da66f5b4470f50738286f2d42030d2e32ef15d6c795dfa8da36502e536819dababe9386ca7419f2c6cb0e8580053ace1166d4
SSDEEP 3072:e9wzBZw8XQP5WSNXh/gxEuIwb26S+Q8A89FVA4CmtB59JtjIcAqOCJxoHStwNp+b:rw8gP5WStapIO2j+PA8bPJXfx2SGsTH
TLSH
T1F0041237BFFAD669F00531395285A2460C5125D3DB894F96B4CCAE0ACF9A2AC8DC315E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001fa

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001fa
Size 78KB
SHA256 63678162cb830afba8013a29be9148c72c3dd90561f1b0e7a3cdfbfd883912d6
MD5 f536e8f265fbbd76a5f7b9fc0ea0ad69
SHA1 8db474f6ca6e7548d47cc3b078e66abdd5719066
SHA512 2d8d79bf7dd4ddd61b871b3e54e61972cfd2cad17f11865707e006a4f9ffada7b9b2524a1f7ce056aefd2b36e43264a813fd9ece00b3182d034aee5fb84a75d0
SSDEEP 1536:SeUkTzc2ZSN8XQ9NbA2PentRJ2wADNXh/xuEU0bI799K:S9wzBZw8XQP5WSNXh/I0Iy
TLSH
T1AA73E035FCFBE339E1052038629156860D6B56CBEB88298234CEDD159F943BA8DC375B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001fb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001fb
Size 83KB
SHA256 86145e56e9b4bd3a42e3ddf6b7cb6bc8e9372891aa5bae35ea0f3facda3c99aa
MD5 f35ad0c20d2f7e02b99e4866a98989d1
SHA1 7e9960316f3eb5bc7b5f2fda0b761acf0ca898b1
SHA512 253fe78f7ea21143f4c8d0fedbb29eb3debf6b08e5ecab1cf2a4c0dee1f80d9a870e6847aa9fb9a39d8d2f4e601594b633869b2fe77f8a1c3363372e6ff477cb
SSDEEP 1536:cc/sLIWm0N5TTkS8NjHCEr3pReyJ0TFJz1fLtGCJL7:fsNdkSWH/0TFJzhLtTJX
TLSH
T1A083E130FFF587A9D00EF6737995D6029EAA97C7E88128C834CE8D586F506CD8ADB105
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001fc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001fc
Size 145KB
SHA256 0598e13041b04bd01dc5e5849abebac0e253bbac3ec6bdc71ca62b84100717f4
MD5 8f1c7f5187e8e78fdb31a5e6c688e803
SHA1 64b1ef52851b1c5b130bd7fc12576329d1738f0d
SHA512 b5f744e0af9d4736b542060471404e074fca5769ffebef2becd0a311329bae985b97ffb52247e571ee0c2a9b7a99cb3fd5d91f21bd807a09d0a45fb651d12217
SSDEEP 3072:1SERAbS2HYOmf1uZYB58lwhf+sNdkSWHGcZOqDsAF:1VW7HYOvZA58XMdfWfZCU
TLSH
T12FE30230BDF26395D48B653A77424601AE36D2C7ECE355D8F8CE8C0E6FA55888FA7109
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

150d9d2c7d029c27_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\150d9d2c7d029c27_0
Size 58KB
SHA256 8e615bdc0e559a0e2a76343df428ae950333614ad3307e982bbf48dc822afd44
MD5 b7ecca984dcc9f98169c8b0f6a1e04b4
SHA1 4a42d7c41dbe8190780378bd858765d82ad130df
SHA512 2eb7ba0572db21557f5ca902a7383467672a6f46cbe6de0289f18500c7ebf9e29ceae26c7808f5cd2414ffc8d2bb0306f79a6cb63cb569cca53beacf1a907e79
SSDEEP 1536:ZTsJKN86FUQGtpdRqm3l8DjJ1Si7hJEV:dZFNG+El8GtV
TLSH
T11B434CCFB2DB7330DCE221E9015B400A927E3815AC58157EF927E3F169B5A87903AF25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

16c5cff8f13a1c52_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\16c5cff8f13a1c52_0
Size 235B
SHA256 cd443fb5e53f1dd2e7262047801d720658a97f793b99937e29ccaca9a621dfd9
MD5 05e19ac7713aa1a07f18410b49483235
SHA1 909f485d8ae606889b98de23bc05bee6a45c95bb
SHA512 af895ebeaf92b557a4930decb1920ddae99d39402d3082ba14df603352418a12a38cf52708801f4e3bdce25d0b25bed6ecfe96ba94da871eab52ab272ee36a2f
TLSH
T102D023FF35540449CBAD47F6CD7F6555830340994C5DC0D10C40D0F627445F6B2811EA
MD5 SHA1 SHA512 TLSH

Submit Download

23571245e921ec51_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\23571245e921ec51_0
Size 298B
SHA256 0f58adccb1408265b8ab76f36257dc7122adcd65370fa309fcaa32732eecc90d
MD5 d2f64d8b01b8f06d8cacce90694d5ad4
SHA1 9f5a659a6ba5c5787dd1cfc0bd48c9b06caa983f
SHA512 94b4230141087d2bc9b991b283d41c306ad6163f0f0ce2db425c3d306c816041014e9ae22896845486e767170fa08b39dc576fbeb6f67a2ad60ea3b91cc8e6ec
TLSH
T133E02BF720601931EAFA94B14AE87179C2CB41F44C9A8814597441A2332CEE9FADBE13
MD5 SHA1 SHA512 TLSH

Submit Download

23571245e921ec51_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\23571245e921ec51_0
Size 298B
SHA256 19b93bf81f49d71fe2a67160c9a10e4174ad19ad741fb697371df78c2b1d2caf
MD5 c1164865ea370ba132aed5bac6eb4e0e
SHA1 b446857e8de945e6cd0c31b17294bd4a06d3cd7f
SHA512 9e6e2961f4ff5a9759787bf425dd135bf0aa74a0ba34085ce3e429aa25082894ecfe9ed2db27937f8898f0d88c9e0f6f92fbecafeae4485109eb99eefda4fdb7
TLSH
T180E0EBF328900820F13AB3728A98897842D640C44C8A8438F4A06121630CBE6B2CBE12
MD5 SHA1 SHA512 TLSH

Submit Download

24e4a2b0e685d64e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\24e4a2b0e685d64e_0
Size 32KB
SHA256 2a779274629150c95e6d5ee38d585846337e30adab162cab396871ba6e92e025
MD5 b033773f673006894c71c85eb4d1ad0b
SHA1 3635e6f2b54810f6584f6b8825a584902e2106f3
SHA512 da895dc2f0ffa99d0756382242bced779ff6546ff734d3a70a3a2e752f9aa3d855908e97ecf8e1245937fd96597a140ce10433e953a3448bfc5fc41f55775496
SSDEEP 768:e/SNM6g20irUGurKGwoQR8LtFVlhSdiP4ARaMBtvmxTkdsfIEq+NDQpR:cSA20ikrr9QR85FVrP4ARaMBtvmxTkd5
TLSH
T1F0E2D68AA395B99ACF2253F94142CD1A7333498E3ED3933356F1F7252C553E64E89C0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

250593e94f7d5195_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\250593e94f7d5195_0
Size 328B
SHA256 560992e9d490ba8b19a70e01c18a2e400d4e20c72dd4ee074e97207927064121
MD5 8df3817c7cb44a9fa5df04d827f872d4
SHA1 b75739205e1d679f525830b6a3878c598308d4f1
SHA512 16c1586a77458c6cff36de8c38b6489cc5c310e83eaaa0ca2b5d61b86e16aacad0dac52a159b80e413620bbd57cc4ef168de6ee5998acdd1106e54d9c187ba13
TLSH
T1D2E07DF34508AC00D7655FF183B96263D123A0964FDD06D8488596B27F2403A1644D01
MD5 SHA1 SHA512 TLSH

Submit Download

250593e94f7d5195_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\250593e94f7d5195_0
Size 288B
SHA256 920f165c6244055c2a46161f7f411e802ea476151221f331a9620ea4fc38be44
MD5 e08f3d5b7c231a0534993735f25e41fc
SHA1 2df9d629d1748b78ff5ccf0c956ea06bcb08ee71
SHA512 a5f5e4a8ceb9604deff480cf944205c430c23e9c060e1da84c2505fbd3612695adc281eef7f86ed9cac6c1ea5442d0c48a6f03df38f7fc1d500217e70571644c
TLSH
T133D095F7050C8C05CF599FF096BE9333A13350694FDC47D6414481F35F1807A1544950
MD5 SHA1 SHA512 TLSH

Submit Download

2577593d8a418772_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2577593d8a418772_0
Size 3KB
SHA256 85ca89d304c3e516c4cb2cbdcd9a2a9c8c17d742e777bb88b0a125c0695688e2
MD5 a5f22d7a6145224afa0620a9226d50d5
SHA1 dd9fe0965c23ccdc5f21a0aa0a19171c95380fc6
SHA512 01218255761d0f586fa608d7936a6d370c501a0d1491f698341012ec39d4e5d215a6c2e9ebb50343cdffc03e59b7a3937a03d425ae9fa15285aa1ecb77babfec
TLSH
T12C612BF9B3A55445CE329FBC268116275B716209EDA2CF33646187511C843F3299D45F
MD5 SHA1 SHA512 TLSH

Submit Download

2577593d8a418772_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2577593d8a418772_0
Size 3KB
SHA256 6ab7d09ace0ef16ea484d55feccef354fb938b89e67b2fd1def4359447d15228
MD5 aa4a0f49738224f8a82c13de5bcd4335
SHA1 fd08ed4f4de7b67574010867358c3072a8be93aa
SHA512 bca900f2b68f08458c9c07e7dd5681ff2b53b843d2e0d9426a3c74dd47f77ed3753147b2cd158bb05a99f39fedd45b5a13709cd67e9da257c7180f03106ac03f
TLSH
T115614CE973A4C451CF339FBC2681132B5B71A208AD62CF3364628B510C853F3299D45F
MD5 SHA1 SHA512 TLSH

Submit Download

336a68eaaf209f48_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\336a68eaaf209f48_0
Size 309B
SHA256 0e692b2ffafd092a4835f539db36f67450a572b20eb9800bd2c1c8e520ee917f
MD5 56e8533628f7cbf268448ed1193da77a
SHA1 f6050d0d24071b699ee36eaa50f188b719e1484d
SHA512 df9dc7fa42c5193f8d8323b20de309649eda6cd061063541ad2228285a743ee470a204d5a7bdb773642b9f3e28d051739d7d9eca49c8546e766a8800f3b38b92
TLSH
T1F6E02BF3895C2AD1E9B94AB1DB7527BF472390EB1C8689CC100A501547216FCD392271
MD5 SHA1 SHA512 TLSH

Submit Download

336a68eaaf209f48_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\336a68eaaf209f48_0
Size 309B
SHA256 f39f14571be39468b65f556463aee13c1a4586c680997b30040ddfba6cdc1720
MD5 8d115e65c9ed3ff7a6de825d33422dcd
SHA1 a66b7c5f0baa4fd41042a950ecbbe96c461801d5
SHA512 fb5a3262dc3a8b39574df667825290b9b6b5ae5923d317f326fa29806ac5d162b245fb2cbb061f533a825483755661bb87274d82e3bf7c379c72db2018d56cf2
TLSH
T168E0EBF3519422C3E67B02F29AB027AE8A2350FE18968C9C8009502221619F8A382070
MD5 SHA1 SHA512 TLSH

Submit Download

367cd5fd86abf9f3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\367cd5fd86abf9f3_0
Size 3KB
SHA256 6408606e9f211f9b1f63d924ea3e5645507a5b26714715ed2103337f409dd553
MD5 d14dffc8c2f56661702934978278c713
SHA1 655fed96efdcc9001a97a0c4985d83d981b80686
SHA512 d22d2c0500b37537e0d053981b88297a7e36a51597413fd80831ef54115c438ec8debf8cae7a61edd93934162d4edbf4ad468fbd7e623d68fda18ae03ed6a6cc
TLSH
T10771B8EE6344961DCF3253F912524A26633780043ED3873320E1EB721D442F76A9DD4D
MD5 SHA1 SHA512 TLSH

Submit Download

367cd5fd86abf9f3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\367cd5fd86abf9f3_0
Size 3KB
SHA256 2e2bbe181bb89f9cb535005c60f4c196ff428b6a9d68cc31df71ff0e3928dfa2
MD5 23c6f31da4efa37ece045c5281f00e82
SHA1 78119d12159749427905a9a6533088e51c779d18
SHA512 f6aa5ecf9aae176621f1cc32c1d4a5bbcda4cb05dabf60efd1930669e33cde053b7293699e60fd0e47d20e3200cd2a74a2b0019d3750679a8f8a80e783f8fd32
TLSH
T1C371B9EA5354D62DCF3293F91292462A633580057FD3872760C1EF722D842F7699DD4D
MD5 SHA1 SHA512 TLSH

Submit Download

5f3885671fae6de6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5f3885671fae6de6_0
Size 81KB
SHA256 4591f6df9cde5bd4eeb139e6ab7b5f5da7994e90e9f4bc2dcf3e86dd95e30dc0
MD5 0c738f013c297f09f8837f708bf3449a
SHA1 424c7befa246f3f2fdeabcdc76d808e144c59a7f
SHA512 488547ada122232b2275ef4390c33b330b88500c63cbf2eff21baca3c459322014196efc506d34849dca033fd6cebf1789c0cdb5d8be01b752b0a6570c9a9660
SSDEEP 1536:CeEa9ui7UdZ0vbJXm21bbxX/Bx9+XNvpfm/:CeEwuIOZuJfxp/f9IHe/
TLSH
T14F83A60467A1FA36CF6253F502A2C9577235859C3ED7821336F0A3362C273EA9D5ED0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6048c53dd280a81c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6048c53dd280a81c_0
Size 3KB
SHA256 f852127d055b0cfcb75cd38d82fb3ccbde1bca25df6bbc0ce787dee9bd01f31c
MD5 3f898e34326daa196ec55b2c9cacdfca
SHA1 25df21e3b6fe2976a37a92143f9a5ef67769a14e
SHA512 d0d34744121f3490c66dc4c671e746618f51ca7fc51872992f2b6ceb713a68d59962f7f3b291b0724ed6de5f819e607224e51c8ff5250516c827cfceb23d64e2
TLSH
T19B51B4561B402876C82A6FFE02B4C933F23210197B9BC70BA5A553F62C3AAF28D55D56
MD5 SHA1 SHA512 TLSH

Submit Download

92aa708729096273_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\92aa708729096273_0
Size 1KB
SHA256 52621229ef753a17a93f9d0da1eed0da9fb72868e6298140e3f37f1fbde7ccda
MD5 e4da570d72944e9c826ebff2868340cb
SHA1 3f22ec01a5a9086f11cc1982ab15cf51f05daec0
SHA512 22950ea894e74a068fc2cd75c9fa770bb108500dc850bdb09cf5543f87882043bb0eb957d6771d25e23a5a864684775a35cc31f25dfc26c593910f0571307b6e
TLSH
T194314193C7856961CC3892F086FA5969973783682C839357E070607B3D0B2D11F964CD
MD5 SHA1 SHA512 TLSH

Submit Download

967c1f0d69e2fb16_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\967c1f0d69e2fb16_0
Size 303B
SHA256 9be92e3e7077e3b645d927ebf7941f4d14173c82f5ae4b01dc4c4cbf5362d593
MD5 d1bdf8664423eb5aef5fdd17d636be0b
SHA1 c6963753efc6b09f7312a79767730529476f22db
SHA512 d035b44940352b61cceea43d8a3abd5834ec835458d3b20d457a432dc21712ad7c85815f0d854d61e5c384d9f87fc4c70d00f3c2384a9751f57f8a40dfd624f8
TLSH
T129E0E7F340201410D9F585F1E175B1D9D127C17C54856E8E008C1373160132C2347141
MD5 SHA1 SHA512 TLSH

Submit Download

a5624590dcf1579f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a5624590dcf1579f_0
Size 31KB
SHA256 a297b4c72117fd8bccde666c4a82161d71324283cc35afacf52c92441e938585
MD5 295fdfed2d47ccdc1c14660ab6aa4e67
SHA1 e70c40846a8da55969a54218480a01a1037107f0
SHA512 0d9d550b217477a081fad578b3fe9398e14989a29cd68c312657881440e2197fafb8b3ad9000a89bee27097143c10e0019d8bab574855f8324d01bd058cf5a28
SSDEEP 768:x6MVg2EJheAhOmGXNEZxGZKn538KKDcHjxccXHoQ43XubTNSJA0eri:EHJheoOmGnoGK8cDxZXoQ43XubTNSJAQ
TLSH
T1ADE2D685E795FA9ACF2253FA0152892B7335448D3ED3932732E9BB251C253F64D89C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0df3890092144d3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b0df3890092144d3_0
Size 316B
SHA256 e43ff13ec32dd794e4a2a40b066b7eb3963e4be402ebe28ec9c4993483ee8224
MD5 0daabecd6adf327d5e97cb7e70be9d74
SHA1 1ad843e80c43c4c0293c856021cadbe5fcaf7f78
SHA512 db96bce45c9275b0f15c917c3b51826cebbe3fd1b421917fd54f1876c5d891df3cb55828b023634a196d92e84acaad09e8505c744bcd04fda10a6cc4a211815f
TLSH
T102E0B7F3C4041021DFF7E0F0CBE1010B801703940C70441C0110A16E33407A070CF300
MD5 SHA1 SHA512 TLSH

Submit Download

c2fcc3fbc0745dec_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c2fcc3fbc0745dec_0
Size 3KB
SHA256 2ac1b345225e6920d03924b4be14c6bcc22316c846ebda40c4c7562656fd5780
MD5 a6420fcc15a07b920dbd62be84a98b54
SHA1 20eec360dd26b4d3f0672ebf5ecdf1179decc26e
SHA512 d03352543bd6fba0cc26535477944a1b2953766280de459dc813d6d2b9c198f78095becd6e16e150934138ecba98b136751f4553bd55e0073f9053744d1a8cac
TLSH
T1C051BA7287553A3DCD7B8BF662CAD62FE232C20D2B57E327815213300C163F68D5A589
MD5 SHA1 SHA512 TLSH

Submit Download

d39be313c3c83c13_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d39be313c3c83c13_0
Size 469KB
SHA256 b2ac721f13a34ec22f9fc7383ae0c5e7943832c4235444fc20021a3f197ddaf0
MD5 4c3be8bc5ee5a1ba88f9b18b0e08a740
SHA1 503b637978240961e6b7d9d6bc1f0377915f5bd1
SHA512 265916fe951fe3fab489c25114594c8e3e81d1e9d01eaa9f829ddfea580f6424da886e1402914fdb962ecea012f98197e415cd9e70652ce6950318848efebca5
SSDEEP 6144:OBwOGCLhUjZH1nOzG0s+7ZH3mN6sJNSpaGQdlD3X0/v7INb3X2RxmY7ZXwnMExY:SxCH2VZH3mIpaGyM0zyPExY
TLSH
T11BA4B6156B926A77CE2657F552A28917733641483FD7D20326E0A3393C393EBCE5AC0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f04f41f3941a31cf_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f04f41f3941a31cf_0
Size 62KB
SHA256 67c97ad9e96b8fb576ddc0b12b63750e9bfb6d330d8e940571325da01edc1782
MD5 8d63f2d687be385f1dee618e2d5cac82
SHA1 4b41ffd546053057abf820ef43609ed85dded799
SHA512 9baaa487dbd790a2679660566ca4cb521c3a7861833d75eef24e2c8b95b426709d805efacf151d525caa5edd3e93d71fb0f275b24d69d2372372ecfc05e02117
SSDEEP 1536:IZBy6XJ/a4ck8YPdQoC1X8e2oZHq3Mw5Z2pCSG:Iu65/abkvWF1XR2oSNS
TLSH
T196533ACEB2D2E37AD8E2A1F240275105A3BE54AA6C885C5FB905F7F01971D4B907BF24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 19KB
SHA256 2fc6e4002472c76c016cafeec2a9a4c439211db030c694bf3305b927f5b6d26e
MD5 b3f9e53f03bafea7adb50a3e83f163ef
SHA1 5ce476b01fd789d6d87364ac9f0691e1f8fc4915
SHA512 d5788b761d82a351204ef84f3e25b9ade92ca92343a87f50115a3046eff78b740d817989fd56d4b99b6bbcaf6e0b2fa6ef0ebdec8ea3e5f23830c3aef04b7325
SSDEEP 384:1ZF/Ogow6f2QsmlWesF6+KsBwdXUjyImgbfBCZaU3hC85fJ:11rEQ6nsGWj9bU3hC83
TLSH
T10392A3F09BC919DADF68A07494E18F34323951FBA5171FA7837E6D3A2223BCD155202D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 19KB
SHA256 091f4583fec4d547f85bc18de92fb3f3a5de3421a1302273f730c05f0f7dd92a
MD5 74b665edeabe5aeab58195119a2e15bd
SHA1 51309db6291933b8f751e6d76a101f9a6a8d3484
SHA512 e1686a54b7582bfde02f873ba1270a8baa614b088e443effe43cf7a631c481e2463cf3de8a50f9a7718373c6bdc5cf48e9f03a67d27b50bebdd60db4abff2b7f
SSDEEP 384:qZF/Ogow6fLQs+VWe0B6+PsBwdxUFyIykTfBC0aU3cC85dn:q1rBM6OsGsF9WU3cC8L
TLSH
T14F92A3F09BC909DADF68A07494E14F34323A51FBA5131FA7837E6D3A2223BCD159202D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 0648883805dca565619707ecc225a0c4d5d293f1c830c608f1479f5757e06b77
MD5 f35a0a6315c663cefcb4f512fa040956
SHA1 ec62e548a9df7765e352f4ebcf4161c3d3b7538f
SHA512 b1fff8303fc86e6a8970c12626435163ffbb8c2c85394f8f2dc1d996204d2ff7f7ce484bf7d93188efd04442a93fd85f95328a42976812adb42b381448084fe8
TLSH
T1897143F007925E45CF3805B1A4E10B11323442FDF9633F658756AC793A3BF6EA62143A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 17KB
SHA256 12279d74b29ceb704b232d636b2592daa55543f4631a75695c803b789c997116
MD5 ebb85ad39fc3e23c9a0cdefebc08e199
SHA1 c5769208cf8135dd49c1f3671f6a00ee1eb67df6
SHA512 13b1c07c4dabfffd8b02489b662c52faf0572df259c8d1ddf82c203d44071c6963e32999b8177a3417bc9cab2f73ad0bc2ad374caa93ac2108d6ef7d1ddf363c
SSDEEP 384:mUZF/0gow6f2QqV2WrmFFf3KfdgP1yIeovtB+Ia/3vC0fZ:mUjrB6Ff3K81/O/3vCA
TLSH
T1198283F0ABC919DADF24507494E18F34363A12BBA9175FAB833E6D3A2233BCD115201D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 16KB
SHA256 601cf26ce925feb9a823763d090f84bd22c42f01c6e3385e41e011c5fe91623c
MD5 b3146c25c47abd381b8e44d642078de4
SHA1 18aa371d2ffce0fbd05c5524d5fd7ca0aef2083a
SHA512 34537e7f50c882957543245bcb21995de7889bd3ebc85f4713c33b58d8bef76ad1aeadff9b143428ee5fa5d52e65267c58c11f115f7bf1a3bd71cccf641dc008
SSDEEP 384:cZZ/igoo1fSQDzWsqzy336cd9NbAqgSmBYXawcHC9Eu:cZjzcy33dFbGLwcHCJ
TLSH
T1E2725FE0ABD959D6EF6450B494E40F30363A22FBA1172FA7833EAC362623BDC155341D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7c0174e6e46aa2ada912f6c5ab7153e6701c349bfa39f280c19efb67388fab4e
MD5 168cad4ad5e3ca5de2c5bbbbb8dcf63c
SHA1 8d9d0bb926839752ad876e5c10af6f76b733004c
SHA512 2c2cf74c482e0ab6083d933ee163b5c8e959b2e41b76b532a30a8a0a7cecff75ac2dd31184c0a676fef8ecd98444b683ce8dd04162d52f42f6006a9241bbf9e0
TLSH
T1D27143F107925E45CF3805B164E00B01313556FDF8633F558796AC79393BF6EA62102A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 13KB
SHA256 a90d67e6f616ec5fffab5ebae976469d2b525a84c15c014f27a60673242664d6
MD5 0e3260e0653b5e2034eab261c48fb465
SHA1 abc92a4b6d4cc48c71e62be47bed43791fe08328
SHA512 820bc8712a5c6bb0113707f71402ea88385aade254bd55d9f83ea0970f33e2be54b16ebdd2ba2f94544161d032ce9abe8e30a2f93f9e0396b8913ae60e82c1aa
SSDEEP 384:vM/vgoz7fYZWqs5A/UKpdpuNuFU3dJB9PVcpiwc:v1AV5A/UkPKuYDcpa
TLSH
T1255261F04FDA0956EF6890B890E40F61333622FAA5176F07C732AC3A2613BED150381D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 86db02ebd95db9a51e36d452089ba30ba21311499bea65a714bc32612020baf9
MD5 1bd11c26b4f2d1551a597eec0eceed5f
SHA1 fc1d0241857cc96149b79b9ccf93a5337458b362
SHA512 6b090dd45002ff640013bdd64c6875b6f59390ba64c2fc42762c6f4c51f84fc8f50fc58a006fc50f105d0ca065a668f87ad5990390b4605ef2c4873ac07fd287
TLSH
T1F25119F00AA24B41DF350AB154F01B01327583EDF9737F298692997E3A3AFAB462143C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 891dc41616e857aeee41f478cb23503c1f30c7a2545259d5581c412a73549477
MD5 55a881e7e4cabf4c978d1a17eb9cdbb9
SHA1 8784b7987068422536a34ea1811942f01c204923
SHA512 9fa50825be85a14b8fb30022f0dae0a5217217c7f37ec85bd30923cdc9d6eb17828fcb0a5bc5966ead123a1d0405822f0504159109bd9d73c88d324fc14c2aa7
SSDEEP 192:Q9A3RVKQZVmh8Q2xdD0wwAJZGbBdzKqcVw1lx+/exLbk:QGhVKQZEvU0MGbqwPxnx8
TLSH
T18B0294E047D95D62EF3854B490E00E44363265FAE62B6F8B87326D7B3627FDD511202E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 19KB
SHA256 58a950b84f4bc9483d93593af1d3017b3ba80697f60fbb21e702fbff1f948361
MD5 29c03d5d3900baa8db0f919038df7158
SHA1 660717d6134b7bd0371da23cc4a4e62e0c14e26e
SHA512 5e4b146d96bb4f23351dde739786c1087328bc6af31a4f4dd8506eac72bf7c173625b093a05d973f5dc39515b252ee033347e55021c6babd499faed584881fe1
SSDEEP 384:EZF/Ogow6f2QsmVWesF6+KsBwdxUjyImgbfBCeaU3hC85fH:E1rQQ6nsGsj9UU3hC8Z
TLSH
T1E39292F09BC919DADF68A07494E18F34323951FBA5131FA7837E6D3A2223BCD155202D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 19KB
SHA256 0a36318f24225cf21b314353af75a48d24ab7ac9d0a0d6f41b09e1ab34182577
MD5 fc85a4a89e1489a225b7b3cceda7549a
SHA1 f66f9e269f24e3d92b50c494c9b9de57f8c253c6
SHA512 dc4262f862b68843edf2bd6b2be4e51db1aa940d854faa1c87aa496d1054e8516022779ff3a15ff0bf8e999d32a6032dac5bc05f05e90434f58df0121d1a3c4b
SSDEEP 384:HZF/Ogow6f2QsmUWesF6+KsBwdxUjyImgbfBCeaU3hC85fA:H1rFQ6nsGsj9UU3hC8q
TLSH
T1EA92A3F09BC919DADF68A07494E18F34323952FBA5171FA7837E6D3A2223BCD155202D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 19KB
SHA256 9b9ff3900f702ff7cc00c1df5c39532b4aa63c3998d56e9e90c1e130dbff1838
MD5 50f3870338ea483e9659142dc83ce33a
SHA1 c20a1d12b4c51b07d9f2676cc337703ae9e2e87d
SHA512 2f7de913f0f75f0465411411bf12f602d58a32ccb9e9801a306bdc9cc80a3f7a0083e8fe15993207bf735772ff6b9c6489eef52fb2e3c6ca5a736c01958c974f
SSDEEP 384:LZF/Ogow6f2Qsm8WesF6+KsBwdxUjyImgbfBCeaU3hC85fA:L1rZQ6nsGsj9UU3hC8+
TLSH
T1B992A3F09BC919DADF68A07494E18F34323951FBA5171FA7837E6D3A2223BCD155202D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 18KB
SHA256 a1c2d22eb380744a368f01efe3229005dcb8624b2ccb114575e28ba3909d927d
MD5 b431aeaa5e6b252f88e2a3a60791467e
SHA1 be0e4bed346cdddbbfa655a0772408e46d2d659f
SHA512 c46d17d1443e6ee4c2227c0d1f23f6d1e9c95d9f3448f4cdc3bce2c19bb42983df6ee34b2326fd99f13f965b47c74940b14bb3d5888a740deaf39ded9e90460a
SSDEEP 384:tZF/0gow6f2QqOGWeSF6kKsKwdxUjyImgbrB+kaw3fC85fv:tjrdu6VsFsjR6w3fC8l
TLSH
T16F9293F0ABC909DADF68A0B494E18F34323951BBA5171FA7837E6D3A2233BCD155201D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.aliexpress.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 11KB
SHA256 8edc4013febf3435f2280130f659d693c9081f6c39353a250ef1c01b3e2df5ad
MD5 377888dfa1aeb75771df5745749b4bde
SHA1 a0b912edace105421508b6dcfd783d57220a11bf
SHA512 ed8bcdceb573f267394916c6a1acbe5f4a64d02a386e013d686db113c973ce3b93729229099f3489e8646d9ced53950238cbd666f947974f83ad9f4cd6a3c83d
SSDEEP 192:DAntPY3ENTtCUSRZ8iZJ2nv1j73nJu4j4Yk//EOcq9GWZv5nEDy7K4I7UtqJcVfw:DAntPY3ENTtCUSZ8iH+v1j73nJu4j4YD
TLSH
T16E328CF6C6E4862ED91252F1E7147E1ACE1D0528437C385BC9E9BF4BA3E24B1D241A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 ce48feefa8956b9e0fba1850d866ece0e5dcb2c2651b113e0793488182154f1d
MD5 9751350f801a752cda874dd0192f5584
SHA1 4eb4354422e0f3b070119150f5b5e48154072319
SHA512 cda6c0b4f905b4b803176920d8e293abe14f27e5ca5dd127c9dfb9339b762529f393ff6dc13a0bd4bf51759498e686e4d0e26500c975c0d3bbc44b2fd73f6a3d
SSDEEP 384:DAntPY3ENTtCUSZ8iH+exmqSERrDYkO8qpW95nEDoK4I7UUJcVfeWIAbV/jKEeEU:5Hvw
TLSH
T122628DF6C3E4862DD91152F0EB147E1ACE1D0569436C395BC9E8BF4BA3E24B1D241A8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 98KB
SHA256 a98f925756c546956ef85ff174e83fcb890e5c9f55f41da067c8a662d41b7c12
MD5 a467f8392f0cbe2c5e0133ac16e8e4b0
SHA1 44a62a3aaf86a004bef464706026723a70a574c7
SHA512 1d78de6977ac3fc88526f2f67460a4eaec0265a139c6807cbdb8b8200d60a13828e29b22264da330919445f483f0f4e52c4309ad6a9c86e31afe838e3005736f
SSDEEP 768:wq2PknrIqFM06Bqf035eQb6EEto0K3CqfUDgm03LBsAbtIMC2nj9o2e:mI6BqsUbaW7k1fWMr9oP
TLSH
T1DBA3AFF7C3F4862DD81262F5AB146E1FCE5D0929432C3C2ACAE9AF4B93E5471D141A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 103KB
SHA256 613ef295ab19a4bef33a687f9a7f0f155134a4bd344d253f22177d701a7819cc
MD5 d3ed5586e4c16c2005827e08216c8d9f
SHA1 5e76e1a9176f7ec241dede2b3dc075c9c0c319df
SHA512 13ba9eab4c51bb4331e64bb65ff52969d2272f85865095e7a80f0500a9e58736cc3bdabaffb2df8efd74d78b43ab35ab68b901d043da0d9d5d04aa834935e21b
SSDEEP 768:Xq2PknrIqFMJSAO6BVf035eQb6EEtobK3CqfUDgg03LtsAbtIMC2njdu+gQU0c:B+6BVsUbaFJk5fWMrduP
TLSH
T15DA39EF787F4863DD81252F5AB146E1FCE5D0928432C3C6ACAE9AF4B93E1471D142A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 a57328f5236065ce705cf1fdb23158b2f0835b19a4e276816c6170908294b12f
MD5 47671da765a274a3278bf50dc8212f6c
SHA1 1b079c840e4d0dcad1f3cdd81e805968b5740536
SHA512 a7213d5bc3417a4847b7de6dee92cf6d95dc4c1c3b4a2216e9978099a5e25417316b6b953a30d61df5664421276981fe3205067c59e4ab2fc5a78ee6ce13d972
SSDEEP 96:DtOntO+Y3JzBjtB3llnGAEo3bxwsj4dxTH:DAntPY3J1j73LGJuthj4bTH
TLSH
T11F91BEBAC6E4966DDA0266F09B147E1BCE1D0568436C386AC6DCFF4B93E2171D30274E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 65KB
SHA256 b5fceb530aeaa3cf75d4df7fcc048a50e17295a9e4c8e54c1740bb2f7661d87c
MD5 b670e4eba25f75490beb3e4a107c85b5
SHA1 80013bf1bf4c5e107ca84ea4f167aa3bcc3cb661
SHA512 d3799e9c72f633118d797cfd71f7ceeb1851c639f1bc9322aa149d09e04ea8a2dd5ad53880bf2c94f10692142cd96d13effb934b4b8b6da309191fea2715a0c2
SSDEEP 384:DW4jIq3ENTtCUSZ8iH+exmqSE8XDtDB8P9eiGzPajhbeBelJoBeMTgO7R6qerFr/:Mq2PkqHBqf03dheQb6EEdo0K3HXfuD+C
TLSH
T19D53CFF783F4866DD81262F59B186E1FCE6D0829432C3826CAE9AF0B93F5571E14164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 73KB
SHA256 51b62fe1466fff7d321bb392cdd50e763371f304f4f63cd592c15b37ef3b09a5
MD5 5e57f6ded7cbf001e4477830d57a9e25
SHA1 bbe4e25b24b449e844765fc4eea86190474490de
SHA512 4455e47daf230433f8c56d58fef646e566442925982ef972d355a8bdb92a21df4790fbc154f6c8e386305d1dc06ba3b8c0801486a98a9695dc2a19e4bf63bcab
SSDEEP 768:Nq2Pknr+2Bqf03dheQb6EEdo0K3HXfuD+m03LsA:Z2BqsNcbKE1kAA
TLSH
T10173D0F783F4862DD81262F59B186E1FCE6D1929432C3C26CAE9BF0B93E5471E14164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 bf54bf43789b3addf744cd6c6fa0fe8c8e01cbe2e8d548fcf64171ddfe5c5056
MD5 d2f8dd94f51c33521c6f46c250f3b0b0
SHA1 a2b0d359fc11f5f1f8b2c23cdcbbf787a5b1476c
SHA512 bf020c9f4f71c55f2343cfa0a2bc72a3330814a24e663ef7fb0ad7032070b6e2a1275659750eb41f0c77b597d2ba19aa6a3babbab23a31ce7ef105b060f85e75
TLSH
T198D022A3124130F4A99CBEA1806AAC8EC737506D08D2AED651D09CBA5939CAE0697540
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 6b05054ff7f7676004eade6c1e00b3eb8b0c55b1c16fb7a6662dc1ef27e5d577
MD5 9091059a854f72da692e701977c9a5d6
SHA1 3c4f3620eb5478154ced95853c04d5171bd4a445
SHA512 a6f1d18c914f013ab0cf9f1348ccba4bd248f5e3d1cd16e98d9468a08011c395ba2e75572be1c8caa66b9cd1a89f502fc5f7c8b303fa7bf3c9000bf436383dbc
TLSH
T145D023F3120530B5565C3E969079AC4EC337503D08929DD455D058D9557589D0557441
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 fe37423dbb42e894af3a55cc60188807310d7dd8f9f843a54d04101a1801333b
MD5 b17f088820fbf24bd450267f6b40b0bd
SHA1 02ed85bddc2e9ef44315f29e4048536f353fbf6a
SHA512 106293951f5f3238a3f32fb439782bf75f9a06dc54680214d7f5f605cd1b8a74d356686d9262b70e9909f0277b2aef77387aaded133a3e7b23a7a286f08e2bba
TLSH
T1E6D022A3175038B5A9AC3EC1906ABC8FC337502D4CA3DDE451E0DCAA75758BD1567141
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 e0585158bdc049be5cbef348e43aa11b655f1cd4df4f44f85b3489e613555007
MD5 a55cba8c63286e7c72c35d39833ab3c2
SHA1 f37da8befbb67524834d28301b3a1cfe2e6026dc
SHA512 355b06a4c553b569d04578a802d77798af9a4f9e468ded015e8f121f2929ec1e2e261bd4f0c137f3fee2991f17f876fd929ef3f04e93eec247e1113757346366
TLSH
T1E5D022B3130430B8AA9C3EC5806AEC8ED336602C0C929DD961E0A8EE56B5CAD0A5B040
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 f4f236f8f7311d29acfffe93dc07a2d1945d462cbc7ce965b86ee7b830d91d2f
MD5 96fa9920b7282e9cf1789610391feee0
SHA1 59bf84c1192ee5aa3caddf94c2a8d084ad2d0704
SHA512 7358cbc72c0bc35bffa790faf9030b199d3e12cde8f975a0831eb25f39223b4324d844cf2d368088abbd88c8d12d5343a486480e53f84a8deef0ec4b85a226bb
TLSH
T11AD02373164570F4555C7E854065BC4ED736501C0892DDE495D058DA55B5CDD0A57044
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5b7079.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5b7079.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4efc0f6ec03e3ff3f81701310c78231406b3c62f2e4bfaf052f577688a9eb69e
MD5 105eaaf34b8374902025f1c1b1fb8a8a
SHA1 0b7c8c4dbc0e8870d5a5ca2e66a35ece9cbd256a
SHA512 111dc5c34e3554f241e822c24c55514cf2400407ba8d9868fbf79ec1e4330aa0b57c9ff2ec8783d3f0f73c099b3a1f9bd37213c2d001b4b147164705071d7504
SSDEEP 192:sxZvRZkc/fkspRGxWIdpqvhHW6+WN5zvwDj/Y9Ii5h3OIgrJ:sxZvwc/fkspRG5qHb5c/19
TLSH
T1F222A7126E38A57B4CCBE209BB15BF53E2F55132A1941E49EAFCD61C04E6BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f78cc11820d1b607b59061e957ac11f1c42b8e6f82f2e53191fc1bbe4acbf06c
MD5 a270dae8f8da9d8e8da172a33a089143
SHA1 97c06a953f0bdf59afc38bf64b156514e29ba019
SHA512 ee60cd2b3ca0d0ac1d2dd3bececc833568209f588d959dbe76aaa223875b1bb930d6d568ff86d268fe5e5bd1ab219de2147c6e97d4226c6c93a2d5682e1cfd70
SSDEEP 192:sxZvRZkc/fksLRquWIdpFywk8A8jHW6+WN5vnR7xzaQAu6U/YDbZIfcFOIg5/J:sxZvwc/fksLRqI7HbV9Ak/zj
TLSH
T14452C652693469BB8CD7E219BB14FB13E3F5512292D41E45AEFCDA1C04E6BDE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a69fd32ad1f12e73d16929bad4e13f930ded985fe1f94012aa9223b438be2722
MD5 8e2c9a6898c046bce1138627c5779976
SHA1 488cf07bc89b849e95a4575447d51d97690b09d1
SHA512 6e2b7b6a587185c1cde8437da7bad82f870beaf0b675e180131d2c6b0167571477dab496acc99a0ab966309455f7d6f7ed494c58a8579ce2a67d4c3895add3ba
SSDEEP 192:sxZvRZkc/fksLRqmcWIdps8RyHW6+WN5zaQZY9IDcFOIg5/J:sxZvwc/fksLRq5byHb59Zrj
TLSH
T1AD32D9566D38A97B8CC7E609BB14BF53E6F5403261941E49EAFCD61C04E7BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7bae4b7f391ac33bddb34d777146034b4fb4d255b19da3d68196be83ae280dd7
MD5 5e356bb720dc0312403127b363fc037b
SHA1 bc22b0d1bf2f36dc3faad0debceccb20178826ad
SHA512 29f212a61b97143d135530db0b4d581a217b5a36be818565c5d9b7dbd6a6d36764af781e7d4c9da10f30ac33388047782e44c51f37fe8bdc6565d74042271faa
SSDEEP 192:sxZvRZkc/fksLRqUWIdpFW+37i8RyHW6+WNk81szaQAuLo/Y9IycFOIg5/J:sxZvwc/fksLRqeLyHbu9Ah/+j
TLSH
T16242A652A934697B8CD6E219BB14BB13E3F5512292D41E45AAFCDA1C04E7BDD2207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7a040b4910dcb836711fd70b4af85144afce49b3dc74016bc3f72d22ffef5e9d
MD5 ad57e18df8c4127f7302d4e9443692d3
SHA1 bb5972d50f3822a3c59c2b127886a6ddc75e1929
SHA512 d394c072d2d39d2dd701a4590401f22ed5ae4950006bc2efc6eb0b7dc445dabaced79cd22feeb9f610e063c1224803c15bc129810baffb409478243dd5defdad
SSDEEP 192:sxZvRZkc/fksLRGxWIdpqvhHW6+WN5zxGXY9I1h3OIg5VJ:sxZvwc/fksLRG5qHb5oXyt
TLSH
T10B22A7126E38A57B4CCBE209BB15BF53E6F55032A1941E49EAFCD61C04E6BDD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 7f2bdcd374081c64248afcf1271db6f5b4628a705b433bbb4840030a16e1d6d0
MD5 8ffc3a0701d7d5a012fb4ce1373423c0
SHA1 94d179a1baf408e697114f9679d8cef3ab626774
SHA512 87463c855d756d785a156afc7787361bffe0f66512d7ba0b8f13e380e4cad955b035cffe176b563044586f466b1a089983dc1dee079d8695ba250231c46efced
SSDEEP 192:sxZvRZkc/fksLRqsWIdpqwHW6+WN5zxGXY9IWX3OIg5/J:sxZvwc/fksLRq23Hb5oXDj
TLSH
T12C32C9126D38A97B4CCBE209BB15BF53E6F5513261951E48EAFCD61C04E7BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 29ff6cbd9c9e6c21d11cbdcca944658448d2757320206db0d7bc94171a231143
MD5 c48302d78b755c33f7c03aebd541cd4b
SHA1 50e73247e94f119898d184b3e5d296a0d15dc94b
SHA512 c209f705b603405cb690aa2d8e66e8fc13f70781945fa31512530a5c7d1256abb202898bd8eaf6d1200bcc168eb8053f8b25c5edd829fb7caab6a0e4fed59552
SSDEEP 192:sxZvRZ9c/fksLRqeWIdpFywk8A8jHW6+WN5vnR7xzaQAu6U/YDbZIfcFOIg5/J:sxZvpc/fksLRqY7HbV9Ak/zj
TLSH
T1D152C652693469BB8CD7E219BB14FB53E3F5502252D41E45AEFCDA1C04E6BDE220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c606f34db26235cb7b5a6c780e9ef6e3870b525cd70cdf02b454e7635a2ff111
MD5 0489a1481efe9c1190652cea0cc40d70
SHA1 aa65713d400a925fec70b800424adb6fbac75000
SHA512 a73932498dff57fa10d601d0d86f88b99a7a1db238eff96aefaf300f4d5e5686ba18b8caa34bd84df0d4ba1c04c8ac84612c9bfb3a5922e988b075cdcbceb72e
SSDEEP 192:sxZlRZWPc/fksLRqvkbFIdp4aNywk8A0jHW6+WN5vnR7pip6zpv/F6U/YDbZIPcG:sxZlSPc/fksLRqeoXHby691/jj
TLSH
T13862D6526934297B8CD7E219BA04FB53E3F5512296D84E49EEFCDA1C04E6BDE2203C07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 6ba718199872f22bebb9d54707f260a961f12c9f0100e51b6477886e7d03a43e
MD5 b5bc2ffe15782f07b06acedc7c4b99d2
SHA1 6bed1c4fcc711af9d68c3cb69f71c2462338f78e
SHA512 78df23be1071dd16240e0c4939fd1f6fea4331357f04062fd58f08a59bab0e4b7390d086979fadd5b5447f49299707c31875d76e20aef481af8b1a61543ae66d
SSDEEP 192:sxZlRZ0cB4c/fksLRqcqbF8ddp4aNyby7O8A0jHW6+WNBBvnR7pip6zpv/F6UH5r:sxZlYm4c/fksLRq/GbHbs691Q/UhgG9
TLSH
T13782E893653059B78CC7E519BA24FF17E3F5502289990E8DAEFCD91C04EA6EE2207C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 8d9a2646e0c4e9c71485f04ea1c6e022129af0f329d5e928a47e1e5488a611c4
MD5 573b1c9deadbf968854a208130e5f5f0
SHA1 1e8e19f5b6bbf29cbee019c17dc7b89dc41cd27f
SHA512 bf9b6dde906b8d15f24e06c3d5fa742d32d6828500530ec5b6dca63311c9714aa41b072ebb44c69f0a96ab06f8179ffb0cddc232f8310eeb9fa99cc8213093a3
SSDEEP 384:sxZlYm4c/fksLRqBEGjHbI9691UXkhgG9:stYm4c/fzRqRHbDavy
TLSH
T18382E893653059778CC7E519BE24FF16E3F540229A994E8DAEFCD91C04EA7EE2202C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 8380acbd651fe533806c11ffb0d6890e98fd3aa20c8aefc53ee5625e384701a8
MD5 1d02487fb99f9cebd7b85a7e20cfe0ea
SHA1 3185c7317072e372ed9d72cafb24c83f6d8af6d0
SHA512 7451ca29eac067b8119e58fd8192f2c6d1ecc94501093640c7a4c25bcdb9f439dd919e6e48f120c1c69adc90422c77c25bbc3971d85bd99e6e1a06e2c7b4e81a
SSDEEP 192:sxZlRZ0cB4c/fksLRqcqbF8ddp1iaNyb77ky8Gn0jHW6+WNBBvnR7syIcFip6zpC:sxZlYm4c/fksLRq/GZHb4r691UXnhgG9
TLSH
T13082E793653059B78CC7E519BE24FF16E3F550228AD94E8DAEFCD91C04DA6EE2202C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 1db8e9ff3745305f2a3e6ccd4cf5de9fe6b77dcd379be99c432d39b04fbd7488
MD5 47c11eb387e608051745b330f3266d1b
SHA1 b499752102d9abd7732d468fc1f7fd59e9947db9
SHA512 0f52fb7283cdf74cb0c125b9287a923b5347d6a421b21aea3de2dfc369cf845fd373ea2e77e50b276fdec0435f95a9389224fd5d5b0b1bce4c4666ee3105ed77
SSDEEP 192:sxZlRZ0cB4c/fksLRqFqbF8ddp1iaNyb77kKu8Gn0jHW6+WNBBvnR7syIcFip6zg:sxZlYm4c/fksLRqiGyHb4r691UXnhgG9
TLSH
T1FA82E893653059B78CC7E519BA24FF16E3F550228AD94E8DAEFCD91C04DA7EE2202C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 32KB
SHA256 88249eb8664f0000285274f504970db315aeb14ca3ea39c955b40353725b4717
MD5 362fbbc35a37c158d61387a94db1304e
SHA1 2063ba131750985e4e42e8f1bbd615d4e1900de2
SHA512 644e817a85625c94a9e1be044dcb15eec5565058984415b17ca7bede32a91685f07e1f70deb9655d315ac4bb7c9f022a779caf5a556780584a84c7ef6b5f2c8f
SSDEEP 384:sxZlYm4c/fksLRG66s8qMpRiYnazAW8pZS15posJWeT+MBGlHb4r6914dMuG9:stYm4c/fzRG4Mnc7WeT+MAHbNYxy
TLSH
T138E2E846A420C8778AC36D19793CBE32E6AC505256C9CEDF6AECC91C01DD5FD6B07853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 34KB
SHA256 1bc18ad9e027ddb15ffa3abb0267d6f37e8b5e6074a392de1adaf53ea023c2d1
MD5 37d2619c902845e8ebdc69287c4c85a6
SHA1 87d3299a5853ce6cddb4219086b2776ca97535e2
SHA512 e822d34f8343db9b906c87443ad62df2708244c1670ba2c089364ed02289c2296c98b4c2315dfd363e22509bba4b2af295afec7aa11b22a350bf3aa6fefce9cc
SSDEEP 384:sxZllm4c/fksLRG66s8qMpRiYnazAW8pZS15posJWeT+MCGH+Hb5NmXrP496zMJy:stlm4c/fzRG4Mnc7WeT+MMHb5NmsZfy
TLSH
T13CF2F9429420C9778AC36D19793CBE36E6AC605256C5CEDA5AECCD1C00DD6FD6B07C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 35KB
SHA256 a66bc96b9d3d82aca9f6dd2e406857c4ca739ef09115dfc0a2a2529b5c141999
MD5 c6a08f8485bad7b2acd0f57c0bb24efc
SHA1 0793e6f4b59b0c399a43600df33031b26f1d36fa
SHA512 638b8706420ef43ecb5b78009b4c97764f6e6484a018326b2ffd8bd1251e16263415eade666305f141bb4855cd12ed3a3bebc09489c5ccbbde76ba9340768fd2
SSDEEP 384:sxZAnflm4c/fksLRG66s8qMpRiYnazAW8pZS15posJWeT+MMGmgtyHb5NmXrP492:syflm4c/fzRG4Mnc7WeT+MaHb5Nmshfy
TLSH
T194F2E8429420C9778AC3AD19B93CBE36E6AC60525AC5CEDA5AECCD1C00DD6FD6B07C53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 6edcda2488119a0386d329eb1f6307e32613350ce93464ebfc1656253d1c6378
MD5 78b4d0982a436fc71383d85d0276783c
SHA1 27789de523a721e5cfe55cb128b4f6158bb0af1f
SHA512 add32ca6028be86ccdb9dc94218bf698fde4cab1b9f81e8a9fb79be70b842fdec00388a63a09c9922ccb8e393f62c70670bb505977bb906821281af7f23414fb
SSDEEP 384:sxZlYm4c/fksLRqjvG1Hbgv691UX7hgG9:stYm4c/fzRqoHbhauy
TLSH
T14282E793653059778CD7E519BE24FF16E3F550228AD90E8DAEFCD91C04EA6EE2202C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b2013d38793174952bc3be568633fb45a2df5ca0f60dd96a23c5d3b15ee00e38
MD5 3cc0984b62f594662149f7cba7b714c4
SHA1 39fb558f69d9cf7222e8862a4bc13ff598b4f1a5
SHA512 87b73dce440caef6222c580819afc95f12074ce43923a14660c5cc990f239b28a49d7fe4bf6c775da764553713448b492f9cdc21efbda2455e7b1b1ee3226d29
SSDEEP 768:hLyvIZwWvu+Q+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVDFLlwmW7erocbqA:hLyvIZwWvu+Q+u1jamFLeR71ct
TLSH
T109C2F92B240CCB7E5F801E9DDD5A6F9B3EA802CB67588D4047FD994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6539c260-5404-4f2d-80ed-ee2bdb57a400\index-dir\the-real-index
Size 3KB
SHA256 f7331acc4636699fcb421f8799de831b6bc01b3c51710a7e71d273fab05dc993
MD5 4a4fd61e9f5b0bca0f03d8f612c00fd8
SHA1 b9e1c80b7c6ded930f7aafec793a849cf5434342
SHA512 33a096f38db575a2562b91900c10b9e8127ab20bb3e12a74abf67a615ced6d12ebca18610e8992cb44017748409e78e6cafbfd00569d4e497fd2745b26bcf15b
TLSH
T1FA51FA4E8C451D6DC96D00B26CFA1882377A3CEE9B85DE0B6BADE1316CC337B2D14215
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b61c4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\6539c260-5404-4f2d-80ed-ee2bdb57a400\index-dir\the-real-index~RFe5b61c4.TMP
Size 360B
SHA256 0561c55cc7fedfb36da35786af2122a6d1db918e8389d01d37e5d7b94346862a
MD5 38639aa6a365f2f3058b25b1f3e2e4dd
SHA1 9ffa0a5974b84db7fa59e7cc89a6d0a00b732528
SHA512 99ef5e1cbeba06f0f2652f7ba9f8aacb67af32353f3cbf0e2150786d0024efe10f7cd0395e27b09240c8e3cfd45c6c35eaf43320f61521bddea94fa6cef1edb5
TLSH
T168E02BC587824961E554053B2812499DE2604450A514FA03357C64292C65A885B570CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9e1b4ec7-45fd-4bdd-aec1-50b97be634a8\index-dir\the-real-index
Size 72B
SHA256 de0ba39a56e5435871a17d0e9cb2ae8e1d6cd80a4c87b7bbd012f62178ab8a12
MD5 eceb63a6770a9ddcbc9e51cde4391007
SHA1 20c162326e2e8c6b171ec227a50de06250d73627
SHA512 d50bf863591668effb24e7380b41fb31149b5ffe7daf27e938ad6e85c37397a69d6dca563e988f815f922c0b70b4360b370639435f4518778dbb5a091d1b6e3e
TLSH
T16EA0021603C4106DC5031AF569E611416313C9284241131A56D08047C860A894D6104C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b3545.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9e1b4ec7-45fd-4bdd-aec1-50b97be634a8\index-dir\the-real-index~RFe5b3545.TMP
Size 72B
SHA256 b27be676770a499ea5a6644867732fc3ba10d8f389d7b9bae0989a13cfb401b5
MD5 9e8075e5c71306e8fe05143d277bd30a
SHA1 0173f93d5c89e7ce23a78932d49ac16056289e63
SHA512 0b9129517977a3bf6992c8c30b4c88c606ec9f68aa6a5fcfab597f3fbfd2cce5a390b826ea556ec9c9573f2ae1e7724ae2448b054b986bac7ee22ef833a08c78
TLSH
T1BDA002A207B04009C12613B125D60AC11352C9516342130781A1646DCD655C1CE4311C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 b0961ee4e147ec916980f96c2bfe2707a25fc138a01845280c9eb87e02ca62cf
MD5 0f04a9bbf8b2a670697192bd8512fcde
SHA1 e6f1161b532b88b3c075e8824dd5ff4ac7af1cde
SHA512 bd8cd3c88eaf47380084883e4e652dfdcbc7b9fb2e0440db240cb80833e83919214bd9ee3d888c7567d8075ae5c9c71b032bb1574a753c7af8cd43a640cc7e73
TLSH
T124E0D8BA2EE71D24FC5BE3D9157184E8001578888D48FD4E64266A8B55F02502466C73
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 299e0cef0312afe363b9a21104ac37591ebf8404dfc8d72e37f517ec88f3a1fd
MD5 f2b8b414e4b8e5a1496d3bdeeb0305a5
SHA1 2aea26647a94e988a2bf38ea7ad7935f95fdba73
SHA512 2c2af73e63a88a171de774317d2cc9bd2611f243e0b92b1e53805f053cbfe81184a9b2066eb30aacbb8932b74d821693f320aa9275f461d2426da9cf174dad1f
TLSH
T181A0026041C22806CA6102F831714988A730CE66F562EA93C1B40C89D8971885381080
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 f2dd523203e753e155f4bf4ccaf5f4157477e459540bdc1550a845c1ee88c3e2
MD5 0d160e6e9c5a1005f9c13e4e89275682
SHA1 8514e192e5e02506fc281b224d95708e57f797e9
SHA512 7c53783743868481e24b7f7157757426cb5efd20b9b5078985f520181e7531fed55a98a80f0257272c8c67494989379a437134842436202605d6cf39a1babd19
TLSH
T16FB01250C8020145C448027C20A0045C31348E745655550290BC8001C41224C82C8080
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599aee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe599aee.TMP
Size 48B
SHA256 5d96bce045c0cb41ec4e0d09f8e4d71ae645866a628b093e47a65d2e26d43086
MD5 75cfab5bb0a80e4af4bb9c71d9ec17da
SHA1 ca3c91066351873e064112bd260a49a82ebcf7b7
SHA512 da0092ae0c5f9cee0b3a0887dc09dc11fdca5504777b37ea7b57d3b7265118da054b1bc1443ac38bc8d5209270743c7b1a04925b3fead846dc10e75f5a7b01fa
MD5 SHA1 SHA512

Submit Download

3da49607da8a3bd5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\3da49607da8a3bd5_0
Size 64KB
SHA256 d268fbe52462ade284e34c63b1961df6e063a699900a76126b4579d030e7ecf0
MD5 35fdf1dd44b293b4aa98165c4195a18e
SHA1 99da19c2ea28d6dacad940b60d46d850c7778acc
SHA512 465140d2350f56552b8f8c2c3a8be5d25e4f52b6c1adf3143764d23b27a1d74aa0856c4f47e90165be1386e7c30fff1b83ea833d84af9b9dbfd59ddbd9064385
SSDEEP 1536:88k3vI6M483O4uubRX1yXbRxkY8Yf3iP6O:88k3vFM483O4H1bl
TLSH
T1DE536B96337174B7427BA1B1909F130B713EE167B404C4E8A288EEE54E54B9A4277FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 c264768fe885456a007f40ef7e0e095dde6b2b5c44d3cf9de3271ab55f6ce0d4
MD5 c32cb9c137445e5a1baac2bd706815e6
SHA1 dedad11783bebd25344be0dfc5bac472794d9bbc
SHA512 fc4f575286ab5dc8dd4cdd69e73bd251cdd8f11776baa920b93a44b05099163726b3f5a5309822038868fe87cf61073fe801a163478a6665c94c4f5080f8e36c
TLSH
T1D5A002505B400511F1494FB1208347407710C931011A238B41E0548A9C646C55E51495
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 312B
SHA256 f1655adfccd86be82c1ca3a5ec9c5b46090ebc9d637c1b97aaa3819028892979
MD5 f95a7dde736714385cef1d2a634e00ed
SHA1 2f19180540d54e01b471f3298840eac6ef5bd86d
SHA512 ecfe9f75d347290d7c65828c83a76a70d717c70533aab2052fb52a06382fb9c72a9c45cc8f27d6a8653c19b20d288a33d753abd3e2821de02afcc8813299365e
TLSH
T12CE0970498824230C598037128C1138A32608D54E3A6B34707BACAABB4453810892020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 336B
SHA256 090fb9a360718e46d054479ea1cdbed08e2b53aba6ce066fd098271d840efbbf
MD5 9c2ce53c81929688044d6e5421fcd95e
SHA1 86f6071e2d6b6a8e39d2b84b315c8950e3866b50
SHA512 16b95a5f3719b58785d11516675eb5aa4c324d5169917adeb0db62ff4ca32d35ec366d0290440efaa33b7b17c436032a6496cf699e3ef1f9e7522deb39109265
TLSH
T118E0975888460531C99807716AD127CE32708E54A3A6A38B97B2CAEAF8603A28ED2012
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 51ba958291c06c44ca7323a7ed04d01a2d1aa042c9493dd1521a119103139eee
MD5 6386f404ecf754a172046a4f8beae7b7
SHA1 21f70632b4142ce5cb5857cd76fb278c8bdc1fe5
SHA512 5461e6a8fc43f9a3861cc7018c14c02c74ffc37a0f410d35efc093f1d9e953536894f5283091e349cb1778607310208ed5d34ddd6ff3196579413b8b40ba1aa8
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBDaAYKhy+iVoZFf7Xkn76P59kKBB53ktlFaT:mTXjiVoZFf7Xe76B9hB53ulFafL
TLSH
T15191E006B13B02D239BF695DA2A59A368E4131637A18E96F7FB800518F2BE111DFC4DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\9\CacheStorage\index.txt
Size 84B
SHA256 f212ddaa095efeb5e7348dafec9c81bd0617e4143ca1d854cb853c239e62c7b4
MD5 f34dfe97f4dc3c65914e467c11c3d861
SHA1 dac15d19110b07e7f3337347eb2b3afb24bcd525
SHA512 5807745eafe8bb0ffee3d75a45aff73d6b72b0a901e41316bbeaef5c36a4ab2ff332a7b5a109358d66ccacf6ae3e3cc1815717719f8dfc36e7b74ab2570c642e
TLSH
T137A001BB290980AA1E74E8E820A8B25DE55F9A8C8DD0CEF1891890462128A331016D10
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5f85a4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\9\CacheStorage\index.txt~RFe5f85a4.TMP
Size 168B
SHA256 f958d28722e1f6ad4966233b78e0e8ffde7e01b34407c2eb98d82c3ad7993bfe
MD5 318a6dec8bc6c6bd827ec10bf0b004d9
SHA1 adb7542b6f97b25b249e465010922a35500b8b0a
SHA512 9e2c7d0b02823b9801b3420f54699cce3a3bad2151d4378f6ecdd1b51dbfc74a76a483c727edb497e9928b65695a976e997707acae74ac1d689b3666589c8370
TLSH
T1C3C08CA70622886A2B34E8E09478348CD07BBE4C8CC0CDE4CD44B082247CB33820AA31
MD5 SHA1 SHA512 TLSH

Submit Download

4eb4cdd5-132f-46d2-9267-791be037ebea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4eb4cdd5-132f-46d2-9267-791be037ebea.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 e42bd207c61455be02e1cf7eb2f64bbfed49cce0c20dad1f97e15f26f6c785f1
MD5 f3da05716879d0240e4d5ebd11eb55f2
SHA1 5aa68e5746cb5005bae1bdfe1196f06a9892a827
SHA512 00b40db3f9224d111999035a5487c07d42102a438d0b3885d57f73f9545bace55eaa239cb311b1e1a8f3005d19150f3d57a3764d97e39359aacebe9a98243ce8
SSDEEP 192:uiLsNXBQgxBs+YLe9qQmiU1s+dw4e+CGp+Fdes9omOQNwJisqlU8:psNXBVBszisp/e+CndHeReVzU8
TLSH
T1F6321A35AC786C6B5EE3A951F0473503AFA45267DA893F80E5EC9F1C01DB6AC1316826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 637cb37a7af9d0526ebe19359c272382f2c14ecfef02c3d5c5a70522aaf360a6
MD5 ecd7bea356903c506f19796225d646e6
SHA1 12c0153761c863e673d4370a125779fed23d962c
SHA512 730fc7138a8c579c565670b1f296fdeaac1a5f4283c0491b91c137ef8b628be33205c56d3d21e2bd08044000ea79774a6ae782509ab5cf00f24f4ba53c3d6d04
SSDEEP 192:uiLsNXvQgxBs+YLe9qQmiU1s+dw4e+CGp+Fdes9omOQNwJisqlU8:psNXvVBszisp/e+CndHeReVzU8
TLSH
T1E5321A35AC786C6A5EE3A951F0473603AFA45267DA893F84E5FC9F0C01DB6AC1316826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 2985e0db2dbc394292e3bde3a09f2e304ba1c4260e4707fe9c825b0fc27bd49e
MD5 a90c7adb86f6deb9f17983c2d8b7ed01
SHA1 5cda36c97e886284711544fe1bd8900fa96bc423
SHA512 3b9c68fd795a0cae867e26a8f591322acd4234cbbd3a8b3f7cfd682049ddd16d909b3f33d6366ec68c3d6d2186f4e723ca457c7c71075af87df195cd5edeeff8
SSDEEP 384:jsNXVVBszisp/e+CndHeReVzOOPrXLpe8C/myS:jjHmfEmzOi9P9yS
TLSH
T188727E3168786C675EF3A991F1463603AEB84667EAC93F84E5ECDF0D01CB59C1306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 e76d49ab18713e535089e89406888033d30ddb80f486680e3393a2b5d3c8b870
MD5 183090bd8c3cadc9d295195104f3a11d
SHA1 8b90da862e8dcc90ecf1a6c5f136e1d69486fdef
SHA512 26dc10ddd31050fe56c83d073bd98c719e60550f61fc484d488e5f047af4d76e41b19ce538c623e6c3f6f0522ea408fd30c19567c575a9a35ca4183bdda00e22
SSDEEP 384:8ZcIhsNXHVBsziseA2e+CndHeReVzOOPrXLpe8C/my2:qhdsABfEmzOi9P9y2
TLSH
T110928E3159782D6B6EF6A941F58636035EF89673F7C92F84A5FCEB0D01CA5680306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 47752015476e71fc4b9131f2f73927c82fca5a0e544af6e0fe911fe410a03b2c
MD5 daacfccfe7200c34b21f89fc4684b9c6
SHA1 7e339350a057c1c29343b199965b7469f4ee2669
SHA512 b682d235fc79dd3019fa8dafcdb5ffb8cce6d030b0f6b7a895fa418e43781ac8005d92d3cd2026e2d0a71df5ceccd3f3a1f6c78f8fdd4d785228f70f43a930dd
SSDEEP 384:0iFiZcIisNp8TUNTUlIlHVBszislA2e+CndHeRe6zOOPrXLpe8C/my2:PFQiowgmzABfEfzOi9P9y2
TLSH
T182D23AF148E7597AE9AE9B43A77D2D035EBCC163F5856A40B3D89A0CCC861BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5dfb67d1808fb616bfde5a554a5f6b1d50d0b1c5d1e6dbdc2a5c92c72070bcdb
MD5 20f9c65c2b9a18c47f42257cd2a55dca
SHA1 66d78a4eae777901113adfd508657c293c231ab3
SHA512 9e83963ac3aa9a457a1bffe2a73aea1cd08c00718dc5584a9d1ab8cab824c4d2752b798bd5fc273e342a9eaad2affa1badb0fdc391ee24ae2ee7a9b96e23d5f0
SSDEEP 192:2ONC6v+YLoQmiUyqLdh+CGp+Fdes9omOQNGCHsqlU6:2ONC6vzMxdh+CndHeReHzU6
TLSH
T10712FB35A8785C6B5FE36941F48735135EA89267EEC63F80E5EC6F1C01DF6AC1306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fc14c7fc626f4ec0c94d5333a5618cff0c5e2442c44bb85d2bcebe8e4bd12f57
MD5 c8e5e456364ac81f4a8f34cb9e3a356a
SHA1 7572e30939629c7a1a00937cddda01097c0ab5f2
SHA512 77fb57c81d9d7431fc7940348fdb3aace854f3a9625097e5baa1810ed8361d3668c15958f02103c7a0654cfaf5dc37b6e76d587c39b02c6531b8156e880181a9
SSDEEP 192:JONii6v+YLNQmiUyYLZh+CGp+Fdes9odusbPU6:JONii6vz/ZZh+CndHe9DU6
TLSH
T1EA02F9356D382C6B9FF2AE45F5873A135FA82177EA963F80D9E81F1C01D765C2302826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 c94a165821de45afc9325b6876416333ed6ee43d41ac9630da91e4eec715552e
MD5 0f9729025966fd477354741eb8d94fad
SHA1 1ca7d7d6c121e41f41d9abb17a739fda6110c919
SHA512 53c58f14e9069d3824ad50d8894bc6775cb357cbabc5420bb5cd65df0ac2ee3b7ce94fb990af1916ac1738849ce2faa46f6adbc183255aa4706fee9b882f2287
TLSH
T102E00202D31000AFD039033000C3167035F284210BA30149591006743D123401F24FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 525af07e34fe2b7c2ef15ebf74533549cd0f9cae6a839e8f3845faafae223e08
MD5 7b28472e0462e9613b3e5977518bbbf2
SHA1 13a5aa39131fa97c9409e77e131576d6f0ae1cb3
SHA512 0c5afc74926b1dca011ef14ea22131e1aa3c38a0d2d954a8d746643395f136f3aa48de451c1241d677ab87ac191bf8501f5bf94bbe0c4961f96ffcf3e882d735
TLSH
T1D8E00213D32000AFD03A033100C71BB039F396310BB3014D5E3006783D623062F24EC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6aed6fe1136779bb9d5dd2087eaf640f765504ab3846bf47a7e71549fadc01f1
MD5 514255e50cc6f715cff5947cdf41155b
SHA1 8d5e33ab1f2cf542ff50dc2ff69e2fdc1fe0a7dc
SHA512 89cabfc1f308a99cd453bb3ad5256a00d2105fe809204651edf275bfe1a7de317256bb764f00e8e87cc1f2ee165fb16d9c12baa4654542102efd25411efd605a
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f38a1e08f09e54d5e20326f9d2f87108e213d3f5534c19cd78b6290abbb81506
MD5 1479d3f978bee72f0ddcefab3ff5e51e
SHA1 671c825430b176a342d0a573d8dde53db188a8be
SHA512 27c8883a64b3ff5b1974bd1671c4295e61a8c32e4cfe05911d19484522ce0ea19a2cfa6280e34c81b6a05eb9f4f67fba57e64e793df405fce74d81520ec3e464
TLSH
T11BE00113D32400BFD03A033140C71BB13AF696220BB3024E5A3006783D623463F34EC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4fabe4ee00f11a3eaecea0df8a3c6c256c810f16d37460101bc390c2d61e071f
MD5 44a6bf969de80781bf4b790fbd95f6f7
SHA1 172caea62a4de3c83d82e5a0c5077aa181455603
SHA512 39d9ec1d219aef0587ec8419d3a0da81dbce303173a8eb1173f08e4cef9d56f90aa30dc2cdcfbb2f3022ac41bdebf9a90f33bd1d4ab0f428aaaa579eff883ea6
TLSH
T190E04816D36404BBC1AC033401CB2F60BAB2D0261BE3032B8B2093387D623803E38E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0d781131d4a0a4d702a9a3a65f30e3583e803178d9b53e0c8c1675faccfd6307
MD5 b3ed26c65e783b94da301eb347e639e1
SHA1 fdefdd3728dc163fec30d2fd3b3e0e2f63e48890
SHA512 e03a06b7db50311afbf9added13f850258fe1871f855fcd3f85c6f72a9bce80a58ed658dbf4223e19855094d8749f8afdca3cd3a31b04cbaab1ad8b8c2a033c2
TLSH
T108E00252D75404BBC598033505CB1F607EF3D0261BE352178A3066787D637403D38D80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2e3a0c96b7963cc6a5c034497071f3ff736e97c39320c97e802eb3cc2d8dbe26
MD5 e43f6fd4076905260e78eb4e69c599a8
SHA1 7dff7ff73a0be7623ed907c269e48b2081befec5
SHA512 40ebf49e296e363ac0f434a5bc47c896c09238d3537ea6c4063cdf6eefd082fa121426f4acd6a2a74f84488afd578378681dfbc9fdaddbcbd3cd33b90cdd26ba
TLSH
T1DFE0EA52C71404BBC598133544DB1B507EF290761BA352178A30567879637442E39E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 fb38518f6492644efcb69d4b2dcccf033103af4eb17b57fbc2824edbaa6d46ef
MD5 1b23e5532362a7850640f2e48c37cb3b
SHA1 ee5af27d5148bbb50602df1822919eadf343349a
SHA512 fecb8ec689f2c6b92ca3acb0b75ff5963e95417137baa9cecb25d2cf86af028b2856ffd1010016cbf9066d02e205e044d189c739240ad7c624f8ffe504e97f95
TLSH
T102E0C552C71404BBC568133549DB1B50AAB290761BA3525B8A30567879627442E39E91
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 32bb0d6e1601330ab0b5de92cb07533654c9cfa295be5896ac30301a450e3be6
MD5 0994b66796e74853e699f71c8329b1be
SHA1 c68cd6ddee6b90224b7a03224194d836157386e1
SHA512 a52605e749a1eb0b25b34eca0b04fe82383931b98e022df19488d056d624b254eb3597c6574d7a490b27567852da1fc65abca66940933c8705f7d1b44d4eadde
TLSH
T1E0E09512C30800BBC069133508CB1F60BAE3E0B21BA2825B8A3066293D223802E38E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f96ec5a895667016478f43cb1f777ce7de98287db3f5b35c0401174e6c84986c
MD5 98b772a85b2bc3019dcc843fa63a5f0a
SHA1 2aad79fa2e2bf4f840460edcac48ce1f88021df2
SHA512 6e30e848b2ed49421092508152394ccebd4cde2ff9c292d0830180dc7a6c9c3ed721e97c6eb04908a0bd5f938b3d06f1fb71e836f97d469e9c75890ee76d459a
TLSH
T161E00922D36404BFD4BA133144CB1BA13AB696224BA3424A9A3046787DA23863F38D81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ba22c27e6e328ca9cd5c39f4d2e99a0b77178ba4267ee6ac218af6b782e3e55d
MD5 4be6b8a67aa5df32537cc6d23274ee40
SHA1 5c881794db604ded7ae1c6bed0af4bd7722ad235
SHA512 7d3b68d1a2ec92da1a372312d0467ae62ad32db6d476fa595d8192446e9248d6444dbff34fbe12661f378abe0becec025842da9a636acf685d0b4dceb2093665
TLSH
T1E7E00256D35404BBC158133045CB1B607AF3D0261BE303578A3052787D627402E38D40
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ce721afb7b4e4c7db5c05940f958ed2e84c0ec2bb11f470046d0e3665cff32e5
MD5 f37ee58a5f48b2d9b750444ac64f1176
SHA1 14edaf97728e19024bec8b9ff1b8ff4b9e64623f
SHA512 f699e17a1d8e5954d38e4ddedfc3137daa06c84ed8a0022c2cfed9aa1ef9298b10d55324b1d33f0f4ce43c9ac263337fe4143c64450fbc8d88124ecfbbb2e7d9
TLSH
T1BAE09512E30800BBD069133544CB0F60BAA2E0B21BF2825B8A3066393D623842E38E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 3ddd2d60779f6fa297d08d6415223758e01b156808dedb3d47d41335216c6b61
MD5 bd9d3c6bbbb9a3ecc22c90c669574eea
SHA1 a4e79d528e142f979a89b934f1d55aabfc012806
SHA512 33856ee41508b09f1f8e7bcedeab880ddd3c5e08eab9a9406d441e7c9dce784f722e3fb8e2dd7b9a96e26d4db47f7b9ecc7fadf7986f6a9e5c30f7875e09f95b
TLSH
T1ECE0C902E31004BBD469133551CB1F64AAE3D1B257F2936B8B30563A3D333596E36DC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2482aef92d7d0e5d5f37a633f8260f48a556bc956a6a0b800fbf0e1cee815aa8
MD5 9385d9545d3d24da80b16de7199bfc1f
SHA1 0c89c6954e1f1a31e94fc6804bb9f8976931848b
SHA512 4b67904545526fcf4f37ec85551585e9b92d1dbccdfe9b3cc8c92a37584075d34912e33e9b77aa0c74678e63bcfc4478106bd34721e2ff9755b998c6c2168abf
TLSH
T145E05E01D31040BBD165233011CB0B60AAE3913203B2435B4A30262A3D233156D35D81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ce44ea6be80203228a580093d43e15abf47d87cfff92de264ffc49157db2e357
MD5 39f3a19cdf14b4140a2a9fee03af345f
SHA1 aa046d536b09061d9cff76dd91d406a24cff21c3
SHA512 53603216d76647bdd08476019f5f588454fc9deed8ea9d430047963adc94cd00d620da0ca3e85f0f17e1a600806032db662f42e8cfb951e60e59dc7870ac6dcf
TLSH
T1F5E00213D39544BFD479133144CB16A539F695225B63424A5A2046787D633853F34D81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 665539e90fa20decc969cad41cff0fe7f8946a4a6b8c31b01c6ba5bab1430e39
MD5 1d1e5f703ac52e0f13551b50e21d03e9
SHA1 0a99644e8a47e927a402ec9a96ab9a04b695e8fb
SHA512 2a6d32e402d665d3d1d11f4e9b1105679136b91c206b88eb9732e9bf9fa3a046026e5cfcb3d0e3a72de67203e5f3be260baa00464c305b6ee482d25d574e18f3
TLSH
T18EE09202E31004BBD569123551CB1B64AAA3D17697B1936B8A30663A3D223596E36DC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e67b950992d3efcdd18e3fd30cf2c2815c72094289b0a27f3157095dea156d1c
MD5 2803e6b2f48cc90666d7f8889a277675
SHA1 76d64139f1c5941291cf631f29d791e9fe29d370
SHA512 7c7e652f05f1343e1c36b3f30c9d1db316f7d5a0525d7edaff5fa86eec759d49aecf20d658adf36a548348f9ae1313788214e9cd3be9360ee1df801d9e92c376
TLSH
T1E9E00113D32400AFD03A033140C71AB139F696320B73014D5A30067839623462F24A81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 30b1bfcd9c108a429df09a9876f22b094a2559bb30b66df7ef868c49b99ab3de
MD5 0e913d34dac89de7f5510a1874997eb4
SHA1 072e7e30a1cf96f549626aba6075a18a2a041ead
SHA512 9958781121303d37b93ce83d07806b2bd5449964977a4ce28f1aa0e6f256c9ffc613783b4902d070826c9299809fc30ae9e9441a3c9175ca02e99cafea3d9401
TLSH
T1CCE0CA52C30800FBC06D133509CB1B20BAF3E0711BA3824B8A3056383D233802E38E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6a8e115b710f397759526c1f7b19f2ded0d73d0c203c17a300f863e509763fe3
MD5 341d85b32d8e87cbd267eb56287665a0
SHA1 be48c02c53dbda21b3a3dbda28d72726c92184a1
SHA512 8b342561c00264cbeeb05e9629df893ec7f587ce4517ce9c22cc743f31d50393b3b155fd47f38ae0be02767f4bb032ce65d10321484df50a296c965764eb4d8f
TLSH
T1A8E09212E30400BBD069133550CB0F50BAA2D1B15BF2925A4A3056393D223592E35D80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4f6316b0cffcf53152566f6eac28d8c74081f840939d7d7d2ef96d213e104e00
MD5 7fdc5e2b0cde375628ccabfa104244e6
SHA1 373620f30200c6993c0d7fb9b8289b77328b6d32
SHA512 c44b1f83e2bd23fdcbac904baf0e2196595986c02040b2aac5f34722e8910de092e1ff7fb238da4e397981c78b7e0d4b75d0d92fd4bfedc100711b1c29211759
TLSH
T15CE05E01D35040FBD159233111CB1B70B6E6D12203B2425B89302A3A3D233157E35EC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5901bb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5901bb.TMP
Size 392B
SHA256 04b713ed43a7649d9a29bf2b69c21ba4d9b9c6ddf5afcca08eb11cf132154e6f
MD5 d7239ec4c3957df4380779de4a02d50e
SHA1 314790bfc9314f86ce845f333e70467493bfb707
SHA512 099f6789af66c189689b2d3d98d6d9e733904b4e91ba0588c22ccaadb7b087a0e539beb5fe0c3dbd5b340892aec1ae91c576b990f68fe3aa8f34100cc729364d
MD5 SHA1 SHA512

Submit Download

7b8ab5a0-d41e-4cf4-a861-4a62ed3f4611.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7b8ab5a0-d41e-4cf4-a861-4a62ed3f4611.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 70505cd834039e171b6b5c32476ccacb5d9add93e759c3a3284a3f8f886571b6
MD5 c8b005e383edbfd4f73e6431cc2f64a3
SHA1 e42489a7bce588dd25ae0e17bc28cde7271e5f44
SHA512 994fd8f51b32d8bc106ad7cddabd14c90136d0a878117e7ca8769333c7675b072bed92d656f7abc9f1224ff35d2d5e6fbe5f66fbcfd850f0b02360ac5b180c6a
TLSH
T1FE41175CB6F91149B3B76F5AABF2A8AD487BBC772E07D59D10110E4E0A22B00DC61737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 11KB
SHA256 a0afac6fb2bc6c44b1247ce5fb51fb02f92b2b37663bf4a3b2faea67e29e2e14
MD5 b2f848257d59f0038e979d498de72048
SHA1 8c573f3d1e19786db49c68f8140bf749f91bcc55
SHA512 10656cb0c24d6f0833744638e2d3f49609f4d67cd6b2d655703c59e3bee124058746d250e73f375f371c7e61f80b826d5e8f912128f40c78a3ce44d11b7f864d
SSDEEP 96:aIJHCwPtw0GNabMJ/2uIF+6wu+pMJmntBSquwgqrJS9WJruDYXJnIu0:9xCPZfIj8TSE5vBIV
TLSH
T12732CA506BE92616F2F7AD72EEB27710AF39B91699049E0D4184810D0C63F05DE3AF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.exe

Path C:\Users\Admin\Downloads\Setup.exe
Size 4.5MB
SHA256 0fde2bc43e50cb85d6066352a369dbc9d6f31fa66f43304b80f0f15a90f3edae
MD5 1544dd4ebe5bcec6478d2bf55631d249
SHA1 00be1af6f0f8199825a0a2044b731f47e9bb14b7
SHA512 4d9e423b06843fd3eabf88139d0343b79852b3cfdf8f40d45aaee48aa4701d4c328f037293940490c3815ac1eeab161e87182492e25392221cfe1538e9eb5b3f
SSDEEP 98304:uVzCTWj5bvoX1bE0LIhyotUVXeg79NziJeK6BKbda63PF8p7:uoTIvsNE0LcUNH2eKtbEH
TLSH
T109261209DAD702F8DDA7C6BD8A965403D772B8860374CAEF02D197160FAB5E09E3B711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download