hxxps://projectreal[.]gg/download/

Analysis

user interaction
yes
max time kernel
900s
max time network
900s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://projectreal.gg/download/
Sample260825-wt38csdk7s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2544	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321552499906502"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{DB2F1942-01E4-4A7D-B195-17EF84173A03}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{2D12C3A5-6D02-4E98-8E61-5B0EEBFB5A1F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
8920	msedge.exe
8920	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
672	Process not Found
672	Process not Found
672	Process not Found
672	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4220 wrote to memory of 1808	4220	msedge.exe	84
PID 4220 wrote to memory of 2544	4220	msedge.exe	85
PID 4220 wrote to memory of 3784	4220	msedge.exe	86
PID 4220 wrote to memory of 3784	4220	msedge.exe	86
PID 4220 wrote to memory of 3784	4220	msedge.exe	86
PID 4220 wrote to memory of 4168	4220	msedge.exe	88
PID 4220 wrote to memory of 4168	4220	msedge.exe	88
PID 4220 wrote to memory of 4652	4220	msedge.exe	89
PID 4220 wrote to memory of 4652	4220	msedge.exe	89
PID 4220 wrote to memory of 4652	4220	msedge.exe	89
PID 4220 wrote to memory of 964	4220	msedge.exe	90
PID 4220 wrote to memory of 964	4220	msedge.exe	90
PID 4220 wrote to memory of 964	4220	msedge.exe	90
PID 4220 wrote to memory of 1160	4220	msedge.exe	91
PID 4220 wrote to memory of 1160	4220	msedge.exe	91
PID 4220 wrote to memory of 1160	4220	msedge.exe	91
PID 4220 wrote to memory of 2836	4220	msedge.exe	92
PID 4220 wrote to memory of 2836	4220	msedge.exe	92
PID 4220 wrote to memory of 2836	4220	msedge.exe	92
PID 4220 wrote to memory of 2656	4220	msedge.exe	97
PID 4220 wrote to memory of 2656	4220	msedge.exe	97
PID 4220 wrote to memory of 4000	4220	msedge.exe	98
PID 4220 wrote to memory of 4000	4220	msedge.exe	98
PID 4220 wrote to memory of 1140	4220	msedge.exe	100
PID 4220 wrote to memory of 816	4220	msedge.exe	101
PID 4220 wrote to memory of 816	4220	msedge.exe	101
PID 4220 wrote to memory of 816	4220	msedge.exe	101
PID 4220 wrote to memory of 1468	4220	msedge.exe	102
PID 4220 wrote to memory of 1468	4220	msedge.exe	102
PID 4220 wrote to memory of 1468	4220	msedge.exe	102
PID 4220 wrote to memory of 4376	4220	msedge.exe	103
PID 4220 wrote to memory of 4376	4220	msedge.exe	103
PID 4220 wrote to memory of 4376	4220	msedge.exe	103
PID 4220 wrote to memory of 1696	4220	msedge.exe	104
PID 4220 wrote to memory of 1696	4220	msedge.exe	104
PID 4220 wrote to memory of 1696	4220	msedge.exe	104
PID 4220 wrote to memory of 4204	4220	msedge.exe	105
PID 4220 wrote to memory of 4204	4220	msedge.exe	105
PID 4220 wrote to memory of 4204	4220	msedge.exe	105
PID 4220 wrote to memory of 3252	4220	msedge.exe	106
PID 4220 wrote to memory of 3252	4220	msedge.exe	106
PID 4220 wrote to memory of 3252	4220	msedge.exe	106
PID 4220 wrote to memory of 3284	4220	msedge.exe	107
PID 4220 wrote to memory of 3284	4220	msedge.exe	107
PID 4220 wrote to memory of 3284	4220	msedge.exe	107
PID 4220 wrote to memory of 2116	4220	msedge.exe	108
PID 4220 wrote to memory of 2116	4220	msedge.exe	108
PID 4220 wrote to memory of 2116	4220	msedge.exe	108
PID 4220 wrote to memory of 3572	4220	msedge.exe	109
PID 4220 wrote to memory of 4068	4220	msedge.exe	110
PID 4220 wrote to memory of 4068	4220	msedge.exe	110
PID 4220 wrote to memory of 60	4220	msedge.exe	111
PID 4220 wrote to memory of 60	4220	msedge.exe	111
PID 4220 wrote to memory of 60	4220	msedge.exe	111
PID 4220 wrote to memory of 1904	4220	msedge.exe	112
PID 4220 wrote to memory of 1904	4220	msedge.exe	112
PID 4220 wrote to memory of 1904	4220	msedge.exe	112
PID 4220 wrote to memory of 4908	4220	msedge.exe	114
PID 4220 wrote to memory of 4908	4220	msedge.exe	114
PID 4220 wrote to memory of 4908	4220	msedge.exe	114
PID 4220 wrote to memory of 1468	4220	msedge.exe	119
PID 4220 wrote to memory of 2892	4220	msedge.exe	120
PID 4220 wrote to memory of 2624	4220	msedge.exe	121
PID 4220 wrote to memory of 5476	4220	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://projectreal.gg/download/
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x20c,0x248,0x7ffc5d11c188,0x7ffc5d11c194,0x7ffc5d11c1a0
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,17431982550662095506,12517473391419826612,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=2548 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,8579689001820289892,12777608254949478425,262144 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2368,i,10528293103900908491,8861181880868253448,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,10336229665741554447,17032711006933387644,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,12347875661573738731,6211428725492516516,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,3318808167408034196,14209533102401748232,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,4804869115995836890,2877786886897752124,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3804,i,1356494910536369967,17932039622062509832,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,10634610275756536250,11173359233327094681,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,8600641438250679416,14468759884490249695,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,8600641438250679416,14468759884490249695,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6192,i,11278845646212579779,4073752421034301153,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6408,i,6809425677904836174,17160395527199677539,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6612,i,16846876918571241770,6604564849095286076,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4184,i,5892034487581037210,8075231908367450154,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:1
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6996,i,10747665276331648888,7202475025890825935,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6344,i,16668170144778384117,2668697177059029194,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6340,i,830453703974613699,10883964927365735299,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6816,i,12838561993465705569,9026291331303160650,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:1
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7120,i,1015121651102804811,11216952790382704486,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7140,i,15005119035607160708,4550434839913901226,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4436,i,3490243694893467710,1191828552025956649,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:1
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5928,i,15537787274319457208,14689110980764035944,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:1
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7528,i,10397418416517177514,3414320112643800513,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7556 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7680,i,16467581501895528143,11271156138105680837,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7664 /prefetch:8
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7684,i,7383859875382295290,10446170973797834290,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7700 /prefetch:8
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7688,i,5809251389026755301,15485201339579452876,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:8
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7696,i,11612611673354766476,2814338822215115770,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7768 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7888,i,9290275939320868534,17950976003763372164,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7760,i,1441449877897292686,5214618291232409714,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7920 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=2140,i,8169245566952216087,11256217613561006708,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7432 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6844,i,4565519715463526993,11252018078377104588,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8152,i,3232735374518773590,868435903452097502,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:1
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7400,i,9179018090121893648,13761853715828787309,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=8088 /prefetch:1
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8568,i,6665705164414372807,13337885049820888146,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=8572 /prefetch:1
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8656,i,1618788899045293885,3254428581928266549,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=8680 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7440,i,10529487694775062166,2454404735488802020,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=8860 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9028,i,3814500605187338847,17473658315183737608,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=8972 /prefetch:1
  2⤵
  PID:6408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5660,i,3134692205556215207,13654718742659630665,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=9140 /prefetch:1
  2⤵
  PID:6680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9292,i,5747637715301832446,10511682782745049016,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=9452 /prefetch:1
  2⤵
  PID:7144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9588,i,13891589390885016660,16870059302934643416,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=9412 /prefetch:1
  2⤵
  PID:7152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9716,i,2290835369469373575,17582851952463509457,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=9736 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9884,i,10492653366582352142,18137925921388580121,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=9924 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=10044,i,10423454748715762083,11278584062549843226,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=10072 /prefetch:1
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=10036,i,9730600424652276931,3925489820114326109,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=10232 /prefetch:1
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10412,i,14031571165374110712,17831344496869139882,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=10432 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=10572,i,12276765727289152587,17940431833700268446,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=10296 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=10724,i,16762587912434869582,3381555130085928728,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=10752 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8564,i,6419514635448222206,11781874384034145674,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=9004 /prefetch:1
  2⤵
  PID:6184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=10896,i,2508843144060916964,3550458008719585232,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=10904 /prefetch:1
  2⤵
  PID:6244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=10692,i,1322793887290139162,7604420108748510426,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=11032 /prefetch:1
  2⤵
  PID:6304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11332,i,6898772048658164560,6032987912414126275,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=11320 /prefetch:1
  2⤵
  PID:6364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11060,i,7983653836689258845,10502695253801163317,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=11300 /prefetch:1
  2⤵
  PID:6468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=11648,i,13645410419288043736,9231948733776266455,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=11676 /prefetch:1
  2⤵
  PID:6532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=11632,i,5602969373718044142,6393078251936522931,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=11824 /prefetch:1
  2⤵
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=11988,i,1612311726153923454,1725437444091995285,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=11812 /prefetch:1
  2⤵
  PID:6712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=11992,i,12828770076958763772,1153729433771681352,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=12188 /prefetch:1
  2⤵
  PID:6828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=8532,i,8915638396993755328,5562201194143970087,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=12184 /prefetch:1
  2⤵
  PID:6860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=11852,i,17863693689902856570,15016943614157055317,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=11828 /prefetch:1
  2⤵
  PID:7068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=12416,i,18065964303829292011,7979200223260959994,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=11864 /prefetch:1
  2⤵
  PID:7076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=12436,i,14603836947872722637,9878179849395708420,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=11068 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=11080,i,2693884912139118039,2020138310491751777,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=12444 /prefetch:1
  2⤵
  PID:6940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=12712,i,9149134454124137384,9333761079400014212,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=12552 /prefetch:1
  2⤵
  PID:7020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=12716,i,1692278232176510794,282460762285311773,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=12836 /prefetch:1
  2⤵
  PID:6756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=9072,i,4574954371817465073,12332011885078373668,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=12884 /prefetch:1
  2⤵
  PID:6228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=9040,i,6997965229888833635,9802044656353235546,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=9052 /prefetch:1
  2⤵
  PID:6348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=9064,i,2739674466844383083,15416920947121860420,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=10808 /prefetch:1
  2⤵
  PID:6720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=12716,i,8489207393792986100,2120689554195680654,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=13144 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=13284,i,10125055383581988715,4742853526506317355,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=13288 /prefetch:1
  2⤵
  PID:7232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=13324,i,861018361078358455,10895152407070271582,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=12276 /prefetch:1
  2⤵
  PID:7292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=12060,i,7128036208445309973,12037822382114364357,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=13444 /prefetch:1
  2⤵
  PID:7352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=13636,i,3393602868906287622,8117591890982190623,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=13600 /prefetch:1
  2⤵
  PID:7444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=12060,i,774778007737366282,5666223031167065133,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=13456 /prefetch:1
  2⤵
  PID:7504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=13960,i,7002024174929198667,3995176287156504732,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=13936 /prefetch:1
  2⤵
  PID:7560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=14036,i,8873533897314921311,4947498005852261095,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=13628 /prefetch:1
  2⤵
  PID:7620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=12060,i,2650551522720980969,9668202708245378479,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=14100 /prefetch:1
  2⤵
  PID:7680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=14332,i,10822315161714016907,2796828907479421311,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=14304 /prefetch:1
  2⤵
  PID:7736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=14696,i,13247352838708458759,15623369220158378222,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=14820 /prefetch:1
  2⤵
  PID:7792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=14560,i,6938962965588907291,8544328207913604565,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=14708 /prefetch:1
  2⤵
  PID:7856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=14332,i,15391478050429584430,16246294400265951195,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=14288 /prefetch:1
  2⤵
  PID:7916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=14916,i,4712836191788817657,180536783295158771,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=14900 /prefetch:1
  2⤵
  PID:7980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=15044,i,10998341641597746049,12387727069848770675,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=15028 /prefetch:1
  2⤵
  PID:8040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=14340,i,7057043832640096678,2153352264269358889,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=15168 /prefetch:1
  2⤵
  PID:8100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=15308,i,486035494489444931,8691689512009765596,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=15292 /prefetch:1
  2⤵
  PID:8156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=15500,i,1298071179779250400,6374715201445207931,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=15452 /prefetch:1
  2⤵
  PID:7424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=15436,i,1387488692919330456,7575957631876682491,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=15656 /prefetch:1
  2⤵
  PID:8096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=15144,i,13001694286571352273,16968477040442854459,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=14452 /prefetch:1
  2⤵
  PID:8264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=14292,i,195362564722888911,11122004670325442692,2097152 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=15876 /prefetch:1
  2⤵
  PID:8336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5136,i,6685616828603897734,12684916073494706745,262144 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:8920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7772,i,14867441585033657682,17072735884660913789,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
  2⤵
  PID:6332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,6095702759060185873,281184258937830823,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=4000 /prefetch:8
  2⤵
  PID:6756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,856625916931018257,4567849604842839798,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:7260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,9369017769094384392,9108789492828975843,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=7864 /prefetch:8
  2⤵
  PID:8120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,8348322282146570012,9950432270835763894,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:8264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=15116,i,5086418905874127573,7821381609108091572,524288 --field-trial-handle=2336,i,5257180078169004598,9327323705924331010,262144 --variations-seed-version --mojo-platform-channel-handle=15096 /prefetch:8
  2⤵
  PID:4224

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
MD5 9ea20a12d0c030ae7f84014f382662b7
SHA1 7912569189cf07c1ce092a268e67e9f391b7c8c7
SHA512 39ca414f13163c8479fe7650ae0dd1607b267fe3f319c09aec7bd5f68448e9ac604351069bf6b166b3f897d3afb5d7f35e609b9fc72b9debbcb05bad8fad7d81
TLSH
T132D02B20FF04E002D1072172540047100E0848902093C140E030441CDCEC804D395307
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
MD5 89bc5edb6bd922f1cf8ec5536b066fa6
SHA1 c50aaf0fe1444780bb68ee7ab6e1c7468c2f303e
SHA512 77a1265c1484940562f1514202a0072e343efb323e1dcdb979fc9b7a2c69d85b814c076828b260c0b86a19e482ebb0a2df850f9b7c130a327861a7c56e26cde8
TLSH
T15CD02B20BF04E402D1072172540047100E0848902093C241E030441CCCED844D395307
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 a604abe5f4de25a7e37141cef8850beb24ac0cf5b3d1410945f5cf8db73feabb
MD5 41295cbd7028a77a418bd17de23db27a
SHA1 39065a1687fb25d89aae6c085ecc5453f7391361
SHA512 967f0f8efb30e191716fea628122cba7977533fede376bf3462cf5891b625d7f968062b0cffc3bfa036afc3e6f065968b8ca2b34489c66cd4a6b135871c547f8
TLSH
T121E026A526CEC22EB690A44B527C530CC382B7AE93CCBD1B5708C9E97106140A3C2790
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d3d16df807e7b6f6549bc0d03f6e752c896ad139835459baf9597d2afbff81c0
MD5 5158c87ff49b118c308b8b3c91f1beb3
SHA1 5fc7a2399bcaa84858fbc741290620e960797f28
SHA512 54aa9c8cdf6b6c5f207864fa74cb9ceb50eaf71a4344d1cd4ac9f3fb148bfdc6dbf5b38b1bc9d967434c8c4d8097c5f9cc47c9f09b962b9c9de0ed0eeb13a8b1
TLSH
T1D7E026E446C8C22EF6C0A45751BCD30CD381375E93CBAE4B57048989F011440A3D6B90
MD5 SHA1 SHA512 TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 312KB
SHA256 0b6251fd38152a7a7319d54a8e993417dfe359650a9581c135c3950fe5704861
MD5 932d4b5eb7460fda1f102de6f7149790
SHA1 fadbac31c043b89a72bf3abf502f9ee53ccbf86c
SHA512 eaad89143b37482972189a3ff86698a7ae3332c42248d177fc74e0ec6aa9e1756a0699cb77d3b83cd815e2651df267c0cca4e9866d7a59a26d0dbeadb060189d
SSDEEP 6144:Y87U1JYBYrHsCcjPUrsgrwz9Ot6mjoSF7SI/5Czsl/sfz+IeJqJi:REJYqaQ8QN7p5Cz0jqJi
TLSH
T1786423C8B9A7916BD9F3FEECE0C64958B3FE733433C684798421915B87122D882E45D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 33KB
SHA256 7b0b7abe7f4cc2a8cf9a1ce70fb3b5b355d56ec55617d89059b21bdc384fa320
MD5 af644b2a43309f33a734cb793673002f
SHA1 2a523d97c1abb65af88e5bb6394e9bf4c68c985c
SHA512 d83ef0260947d8c4f9a76dcce8480d7d875df58c7a1fa3205127b574c9f91d854b93c61498d480a8c6bec3e2c4d4fae329010f7d5e125a0daba0163a1d428546
SSDEEP 768:t0jypE37eSL3EDukK1WoJ5BRElIO1EtSJ3WRVxSi/B5X3EoD/:8FL0DXoJ5BRU1jJG3/B5H/D/
TLSH
T11BE2F24A7A167796D1D002C97BC573B699C6E3475DB080034A226E5CBCFAA0F072BEE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 96KB
SHA256 6b414b61380bde87bd7966b8b24907a82bd28b193fc9521ba5d040b2f5ae3c70
MD5 1c44fb97e068fc6627c9a6c51e481c20
SHA1 ab890a67d727abe3f733783a3ff28a4cbd62ceb9
SHA512 26d1e08c4a5176179b82f9c00f5ee454e99e4e2eac4063941c5801188c41f937fc2538de73aea26fd3d9c5025b6c271aa8c340af5aaa2704b3cab7ab47b9bbe9
SSDEEP 3072:3B59ELLnZvhPeq+GeI1mES9eCEyYb10CEQIczEiMBekG064WmaUhEicJ:3B59qnRhP+GeI1uAHyYh0LcIigek7vE7
TLSH
T109A3020AB96350367F4ABB850722EF7BD97401E5A250E644DE520EF6C3FA84E07560AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
Size 68KB
SHA256 a2bb2a6d3c43792da9be787dd3b238b0c3cece22bbe16ccb76d19a744f90ee62
MD5 2ab91bcb4cd4e8a3e835c2170abf4732
SHA1 6d840c1015939e30bfe2009191d42cecb648f3f8
SHA512 ee7d6571228705170432bd9c7a818c7dcf2b2427c2a427f93c2b8a3d4ce479a970e160d8846e044eaa0ae900f9bf22bbafa9c9195d1ffb1935a91d8b39846c24
SSDEEP 1536:QpSXd1DbbJh1sLAnW+WYPEt0qdzlna0yqpAmgvXSKlZp4/:QKXz1/nW+WcydawpavXvZp4/
TLSH
T1FD630288AF8E614E272135DB50F623CFA18FD66D8D67FF2B31946280121E61F9CDD254
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 409KB
SHA256 aa78f1524f5cccfadf7598ab7c83484a6c5f27735427ca5f76eaea3c308fb80b
MD5 c48b60ddd2ed6dd70f63c7a829c18d9e
SHA1 9516ce69070d8a7fd491e940c4bb9c39931d2ef1
SHA512 4a891fa7a3af0a103f2140e6db5cb36c5914d1b1776a88d30d3214e6bf738de946fab4697699afd4069c08126333aef28712c79ed5ed241378267317f3bef75f
SSDEEP 12288:TxVIcX3625f8Qyfx/hurdU2L/jEUfRaw2AIy:jID2PyxJurVvEiawBIy
TLSH
T18F942352A290C7A278628B3054F78C2AC27F59379FD8509C85DDCDBFF66C4DA4482DB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000114

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000114
Size 97KB
SHA256 6e9619cbffb6bed8cd7172c3bfb896f170dd8aac932a3f1ff11bc035b9d53e6e
MD5 7d4f7c31059a29d5ca4bcc8c3090edce
SHA1 1ad0961998e6fd8a57ef2ef6ce4bdee9fbd555f5
SHA512 c283558d93643e09adf26081eee657f56f1699ae7f25a26c25ac19bd6372744b983751ef58cb88f632c1b67394643fa2ef8e6f8d61bfa39887ccbd8ae2f951a2
SSDEEP 1536:c1Ah0NShqi8NjZ+0sw9S54zgbiEvgZXRkSr/TSg:cvN19v+ZwY5liEyS6TSg
TLSH
T1C7A312EE8B71C246E90D57294D20724EBE7A834417C8AD26FBE1F713C6C4091CABD746
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 11KB
SHA256 a510e5721b855fc6164be0b804c08e6e4d4a07d81461a724c706818e6db64453
MD5 9eb4d061affffe385ea43bc568f6cdc7
SHA1 0cebceabf17014c913a254025835051222fcea24
SHA512 90323e8ba8c56e882a77139a6675ee87b8f97afdb7a4ebbd13f3f3c2bb191b3bfea04d18fa6e318c9a131d0de96cfed588be6c37b5c557794a50bce6bc44d99b
SSDEEP 192:/AcUI1s539JMmV4Trc0DTws/om0xVb5SaoFitL:/E5ve3cITws/omib5SPqL
TLSH
T11342C5B336FD2091DB662C709CF14AC87AB581D8F02B2EAA06209A75D7137B31BD2550
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59cd0a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59cd0a.TMP
Size 3KB
SHA256 338b688c137cf9954a394a8f18acacccf9d72c09cfd37a7203de9b1b56c267fa
MD5 6c1dfa0d27c1d7e6e50a5d59d14fe101
SHA1 1c3915c60ebdf66bfcc438a205b4aeccc3005d7b
SHA512 271d68e7bef333285ec2b2c332f43b4328058ca788b2e11d83ce2c429afde4b6bc8b2802c20ec8a8e3b159d175e2f39f118d0b7930715a76a1b4efafc5eea97f
TLSH
T115714CB7034D18E3EB631C32ACC10AC678BA91ECF6377E9A1060CB35C62633105E9658
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 54KB
SHA256 d53c80bdd3fc95a859cc531fea1975f59a4f5f01d6a6e6f81ee387933e2a9fca
MD5 c0f3cb2c8869176a6ba9b41c865ddc76
SHA1 cbd35addccaef1e0f98b947c554a3214321ef7f8
SHA512 15a00e3c14859fe8401e2647cb7da8e759ddf21888dc0f085d91e2c283d46b414db8225aeda183335bf0cbd86bef071aba6c9ade18515778107d54d07460d011
SSDEEP 768:2PADyyQLM7ANSmVJHTD+QhEZIEQEqZYwRIxSgz:5G9bqpH
TLSH
T16343ADF793F089BEC91262F09A246E17CF5D041A031C7C7B8AE47E5753E6872E29164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 51KB
SHA256 8f612f02d4df2a7c1c21b4e2d5808b7c3672b7d3d40cf33c392628e6574fe3a4
MD5 d2a16b46145da3498af8c83a38cfeb66
SHA1 93a7df85f197a4634946b7fb38e7ed1d5bc01d06
SHA512 085ddc42dd80208ee6b551ac59e1cd949824c603e2ad905099713fdb8773d66b820da335f03a3b65f482e7fc679175c56f6d718679c27e2ccd9f408803926c8b
SSDEEP 768:GPA78SQLM7ADSmVJHsY1tvr0uiEC7WZYGoFs7:9cNDRz
TLSH
T1D6339CF793B089BED91262F0DA245E17CF5D001A031C787B8AE4BE5357E6872E29174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 20KB
SHA256 fdef44350bd80b1f8b6ed36064b22e934b1206aed9ea2e6ac1e3e05dc8151d6b
MD5 cb4d6f95b62f10300b1d07f66c1682a2
SHA1 ada082c5dc3389421d1df37da483b1a98090cdeb
SHA512 546c475cdf9ebd7ab7bdbd73e966087bb86bcff6b7e5f3e45d52b1f4f9266c54e33756e05ee2e25d7bbcffc92a1bc3dad0ddde78afaecf396a6026f3bcae43c6
SSDEEP 384:DmAc6fErS+EG8nXDXimeUWNKryJJuJEcBeQR3PDB43WaNhwYRXIQX3jm9mhAoygD:+BqQzgr8dB+kMm+fVU
TLSH
T1499279F783F9866ECC1162F0AA242E17CE590516472C3C4BC5E5BF4B97F2871E291A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 131738b819d8897aca29ee1ad4826473a81c792b31bf8054f7bdbf277b387aee
MD5 c7e2b7390d5181997cec8c4e9ad0b8c6
SHA1 d8c043add861b2b1ef2bcea8d118eab5016c79a7
SHA512 b62536230bfd3a5dd194b1267fa0a8fb9199b5e60b41b259432fb9c348821f7f579a9adbc2bd0a1172495a88abab055d842ae86ffd01e3eec854dcd169325502
TLSH
T117D02353230170F655DC7FD5C065FC4FC32700260C01EDD460D0F85809315AC590B140
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe593167.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe593167.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8e13a02de202c98ea1df6f8aeaba8bc36779f46b90e1100feddb621197b5b4a7
MD5 c11925a550163478e58d1ad3525666f2
SHA1 43ebab5b2464ab51eb4415f6332f79090ab8bf19
SHA512 71a89cc228a9308a59b410b0bea3787180142e441d392ab2f58ce392274f7863fcfadd20740d2b046ed7f6d260d75860ae2513643f0605c6426cedbf7451ae56
SSDEEP 192:sxZ0RJyM/jK1Ml8MkM/f0sKRbwVyIdpoMHW6+WN39w/YvDRjUIIgrJ:sxZ0/MM/f0sKRbc1Hbi/YD9
TLSH
T10942E911AA346AB7CCDBD30DFA55BF53D6F9146292901E4899FCCA1C04E6AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 e475b8fa594dff188218a5959c4b074969dcf3da7032c43e5081bc39c5ee4bb5
MD5 e68504b6d8de7ee7dc94ad78968f2859
SHA1 c848b8074fe615301b6a08084ad8aeef93b5a521
SHA512 5b4f219369d417850216b190273ef6272cc29de453ba61ecb82b4ff3f66c1520320b65ba16a511889d4e530b83ff40fa081813ab9febeaf366dccd755af96d5a
SSDEEP 384:sxZQ/qpmzM/f0sDRNtO5YHbPnWi/JDqB0n:sYCpmzM/frRNtJHbHJ40n
TLSH
T19292D652662089B7CDD6D219F931BF67E6F81463CD914D8CAAFCC90C04E66FD2216C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 75c479188dd953a2c9ea4cf23409dd7987bddab62bf8ddefe1ddfb4fac0629cd
MD5 27c06e9000f19640dbf0dfcb4fb09742
SHA1 87b025fba3d88acac56f420018761c3a4d1be686
SHA512 d86bfb71a0a36cf106eb53f891bb75112f2d843392df5c9a49bb3a3be32fcfd0ff1417fd3d7de24de2002257c690115a12524ad623d880d38c10a621f1095583
SSDEEP 192:sxZQRJyM/jK1Ml8M0cBzM/f0sDRNLVzb4UddpmcP6tREHW6+WNCexDha9wWjRHzB:sxZQ/smzM/f0sDRNeO3HbPnIM/uDqB0n
TLSH
T10092D65266208AB7CDD7D209FA31BF56D6F80463CD810D8CAAFCC91C04E66FD2606C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9c09a6e463a4c206c1b9efdb7ee2aaadb9b30804935f56560c9f0e1c0cb88462
MD5 bc195dddea96afdf6d6021768385bee3
SHA1 bab972a7dcfae4002f29744d6b1f700df537ed54
SHA512 514ebdaf53f300839f93a2e77bbdfa44bce6bebb53056ba2a883767f83d62da945074d8105bcf8e9861a19665072202c7d7cad446553ddd08faaece1cc60038f
SSDEEP 768:SIseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0pp1ror1a:SIseJ3xWvhfynu1jaVcL88pO8
TLSH
T147D20B2B680CCB7E4F844E6DEC266F966EE801CB67984D5487EA880C02C77EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index
Size 72B
SHA256 9f3c4330e9de4bf709f3cf0cfda00d16d5fb39e1110ab968a9e8d6940695ae8b
MD5 fc250adbb087b886301c095812ccb85e
SHA1 291b24abdd7f0089beb1135320c714f8f172c618
SHA512 bd402aa0b35012cc87a8cd5f72bf7aa8e22048d29c7d51e40a42cdfb07eda2642c2e43de8a508e20a33027b0ab07f982175f1052db3bf787fa3ed30f7ebffc2a
TLSH
T100A002971694106DC056DBF826A616662763E9120201271782940058CD515578FB540C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592e2a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\070fc69b-28b6-45cc-8a56-75c8dc728b82\index-dir\the-real-index~RFe592e2a.TMP
Size 72B
SHA256 b3fd6ef83bf0e11b1526a57676fae35a13a54135e9b96f4a9c49fc6577254f1e
MD5 8866d2abe2c38483c7c77669b346adb7
SHA1 b42f22726d2d72d72771a35f3f8841db341b5a96
SHA512 c34ab4532b10c5c8821fed8d789c17525c1843194910de132a5d596d81b643edd537705db925160f4f5459ff37f270d622d1a805a52a9982ea2e5e75c9e4901e
TLSH
T1F4A0021003804019C95311B2699742965384CE502104D70740E10054CC53AC05F5110C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index
Size 3KB
SHA256 c3330fc7629a1d6efdf97304ddcde264ac081db21df0be3e0872b28fddc34ccd
MD5 4a2e4db399a6cc5a99213467eea5881b
SHA1 0f192cb43f5ea78a0f6382b00491377bd214a027
SHA512 ae9d31c3f00eec72dbeb5afa880d09c7222b2fdf1e8c94f4b1cb39dec05e9d4c76d73e42ced8996895df01a18fe92a2d3af9a6080028a7d98eeeb37b02176cd8
TLSH
T1F651D84E8D091D5EC9ED02B239FA015137B518EE4760CA873A9CA131B8C737A1D1D666
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe597ac4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index~RFe597ac4.TMP
Size 1KB
SHA256 b17da1f81687ae8827b4e0e32768c3b9363f5d18691adaa7a2c73c728da45be5
MD5 f93ee67cd7dd68683693554c94526943
SHA1 14abde5e20c9a90b357d644b321042b27241e57a
SHA512 929deac75b5819b06bd71d96afbad3fba6320ad22ea2e0b7370b5b1c1a04ad64da2d7fb731c0cdb981e79399c8c9ce727a77f60b6dd1f1913804ff2bb7ee1b1f
TLSH
T1CA31468B4B419A1FE8D440B20556A4B83376CD4053127783987D633DBC757AD5E5F0C8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 8b3bd87f58a5223c4ac57f2b2832a67ac0e4858cab353a2de6d9e70036b01e38
MD5 39ae5a1a524dc069f0698702e8a7e8f2
SHA1 c5701bb073a72fc3fc6be7c0456d9e6397b775c7
SHA512 c34006d79b038039d574cae446ff485fe1eb44e782c42345f5835aff72ee8a20feebd9bcb9a147d27bb1585a6ca37db90a81416534549243b5a79dbc302e95d7
TLSH
T177E0C0B62DD32810BEEFD3D120308090060A789CE901FC0EA41BF6C3107235530D7C35
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 df56ac3f29d0cd91e7ab39918122cca14dcb436ca98cba5faf4ba4fa2f4115e6
MD5 d2a6ccdf6187d75ba69f5ee43f6eed8d
SHA1 8b85e033d6a19fac83ca5c157fb036b027439b1b
SHA512 eb3c7d6f0e965852366491e860792d6ababd071cd0ca2655a034914162541a08778e840ef185892efe3cbb62f8edff4da6e128bc19e856f9bedb52196bcf1acb
TLSH
T1F9A00222D9549051E402067190A101CC6234CD9C8A17335190AC04748D6914256E7114
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592f05.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592f05.TMP
Size 48B
SHA256 48aaea6edc12e36f4a86f7544e58d0193f493abc6a6a52e22927959a532a3e46
MD5 82e3cc82fa91b72eb0b4a4fff590e132
SHA1 f72a8bb39e344bb4c479cac100d3ba95d9a7caeb
SHA512 bfc17da6866bbcb3ce72f3287433f26e3693996bc1e5ec61f489f96c05ed20bf01a1b97c7e0c397916f0cfdd4526e0d6e42a164ba6fd98651f338b64aaad3230
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 09396b037ac66375f84478e98e1d96f1a9cbcd3ad544f198101b4854bcfe14cc
MD5 00622cefd41404825b075b017f623dfc
SHA1 d69f877cd7bf6c740f58bd29160b81ac4499d5bd
SHA512 90588373b0cd1ceedaa0bef91cc007e0c450ec4d141721285745021392542836b21379cea1b87bf766373bee25a74f0a078241c76e7a1d8cee556d1e0192b7e3
TLSH
T1AAA0029435881442C00827F290C189512650FC1025110352F0E5486698513719F8A815
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0ef04e040256b3df539b8b63cdbb680c0b354f65381d8f05f25c1ae66f58a217
MD5 b1c8f7acb3dbb7e6902402c82c5292dc
SHA1 bdee762fa128add868eb913b26f7e58f69f66422
SHA512 29af30b43995ad2c1d9ec2b1f034dc4201728114467bfcd97b01f7e63759bfd528b74e5bf8cf5faa8db10156c8ac16001ae33ca4cd3d080d8b6311d84b77187a
SSDEEP 48:KYHIhKggkXyVDIdKYMAPyJiI/KXq09baXbtNdiz:KYH+Kggm+DmKYMS6i4KXqMz
TLSH
T1D3912506747A12023C3D2888B2E5D5370F4139A3746964EFBFB844A58E67E210EFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.usage

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\.usage
Size 24B
SHA256 fac0a85e4f5907c8036b0052214b777ddbacea9420e5903526272dc76bd4c7b6
MD5 e1edf83f1dbe0a1640e5800ef2f44b90
SHA1 58e8f31a1282e84a05c6960d6ab461d6ccef42cc
SHA512 151b19bcb34d72c304d02f2830f577036c5d2156499cb998643a87a3010544e5a4c236f8458786ea4b3416aaa4fd1ea96fc3bfe1ab0c5baebeac29e5427ca417
MD5 SHA1 SHA512

Submit Download

00000000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\00\00000000
Size 1B
SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
MD5 93b885adfe0da089cdf634904fd59f71
SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
MD5 SHA1 SHA512

Submit Download

0e7d9fcd-6e4e-4a54-84cb-74009e84575c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0e7d9fcd-6e4e-4a54-84cb-74009e84575c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 6baa655911c2e297414196ca78983ccbcd76c3a61d9a03c7afc10534484ee814
MD5 47ca91195ef9acf4351666ca82d59c63
SHA1 baf08a34606c1f41161f5bcc7d9153dfa3bf834a
SHA512 03110ca2cda7b884aa9e4b5e070c11b21752bf9dfd79f6e2d1eecde3586b9111e6e396ccce2f172796817a54de384078279ba99a38628c0c3527fac128ff7b81
SSDEEP 192:ugm+xasuheOwQxMGsNM3QTeYM7Jje7QmiU1/k74MTH7+FdLJxtQ+2t8z1JqgnM:OZcIhsNM3Np7detmk9d9xW+26VnM
TLSH
T11A627D716C389C77A9A3B542F48A37034FF89127DAC45A54E5ED6F0C01DA6AC130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f149954e5beac2fbb52a6a692aefe971788b727d13165ebf418b32a805bb77af
MD5 d984d7dcccfdad42ae451ef3b72ff080
SHA1 93783b74db8a1f8daee0303d64a24d7bd735ca1f
SHA512 9c8aceec69cd2882db58d47d5f3c2ff1363a99611283e54cd0b064d02f0c85c76d8ceb66698e251c4ef60a1afc47b38eba6eda859c50ca79217f6e869a0b98c9
SSDEEP 192:lONP6vMtPQmiUyafThTH7+FdLJxf847CLU/u:lONP6UtRRTmd9xHQU/u
TLSH
T1EF020935AC786C7BEAB3BD46F48A27171FE4116FA9905B54EAE82F1C00D764C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 373bdc202f8e91e986c913791d36dcf27b95ed68cf03ee225cfea22776c784f0
MD5 5a44749df838b0768ff1449412e470c3
SHA1 453254a55fa2f46e6d732ec10d18c64738ea08cb
SHA512 9fd13d6dafddfa99c76a7d9ad2a294b3214b69d36ba3e69f329af67d86ecee3f23d1a287342af200626daf95286245d9fc0db6dfe4ca307bf84dd88d934fe8f1
SSDEEP 192:uKm+xasuheOwQxMGsNM8QTeYM7Jje7QmiU1/k74MTH7+FdLJxtQ+2t8z1JqgnM:cZcIhsNM8Np7detmk9d9xW+26VnM
TLSH
T14B627D716C389D77A9A3F542F48A37034FF8912B9AC45A54E1EDAF0C05DA6AC130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 a21af270c36c301323832474d237789191e4dcdcb0961d973e827f47d41ae460
MD5 170f125339de0dcb4b76a303a5ae26ae
SHA1 44d5253812504806755f4de400f8170e17eccd15
SHA512 710f419d0a92818e938576c7f137fa3119164dfbf43112e3d474ba022ab24778c2603f5ed230c5078786498caad90cf17b29b9c440b15e030107a3691fd0a8f8
SSDEEP 384:QiFiZcIpsNE8TUNTUlIl8Tbp7dewlg9d9xW+2UVnM:rFQpdwgy8oGElUVnM
TLSH
T10BB2F8F248E7897AE9AE5B43E77D2E034EBCC167B5845554B3985A0CCC961BFC30AC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 86ff88728d2b72b14141ca9324e477eb3d20676438be9920165e98c191b8a410
MD5 3af8ec4c561be6e836a75fa64813f976
SHA1 32fa59556c42cf8022abde4768646f2bcdfc86c9
SHA512 64d2985b6653e0f6bd9c49a4fc080a59a41d65f59949e8b4550ce31ce504ca3406057fdb4c7553c991a520c5ed5551d969faa52618c6677299da63fd8537b324
SSDEEP 192:sONF6vMlPQmiUyKfkhTH7+FdLJxtQ+2Q80IJqgU/u:sONF6UlRrkmd9xW+2VVU/u
TLSH
T133121A31A8649C6BADA3B546F08B33034FF4922BDAC46B54FADD2F1C01DE65C130A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 fa90fdd2dd4774d43e0503461dc4f8e65e26633c0da37995365ef8fc6cd0bbc0
MD5 bd407e77609604e8c254ec56cafb249f
SHA1 fa288552bfda671ccff3043217c38535cc735c69
SHA512 ad3a7ae5895a314837acbad1a519ad59af616702765dc24dd161182a2184ff742c36eb78ec74f1af916da3c921776671c55fe5decc466685e4421137bf515b03
TLSH
T190E002065100001EC035433400CB1F3029E1908042260644533001681C37B043711680
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 47f287ae941cccd12e93be0899a9479b131f271b6e6fc4cdbaaaaa6fd70b8aee
MD5 343527c8adfc4f55ecb5ca97b3193260
SHA1 b442229bbdb4e6ccbf104559c172bccfffd0d34e
SHA512 07ae336f3e2cd48b2fd1d27607cb147cf4430402f7abc005504a1d02f9001cf88557e21e76f9a6651fcf55f1c83de86f73f790bee29ae3a7fca2ec4699504263
TLSH
T1B7E002075200007EC039433400CB2A3029E2949042760644963015681C37B043B32FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 296dac116c00774b0a92bf12e8e02e6e94d538ba3c12109a8d5cdad205a8428e
MD5 4f18a78979c0e673bb66e68589292239
SHA1 1fe297af7442b54255737faabb2ec5ded967fab5
SHA512 adfcdaa63e46d16dac841ca05008b62663fcf9386791203afcb03c331d9cab675bd34406c836af4f7e64b47a87fe6b8e0526420513fc5f7588cbcbb48b09f873
TLSH
T12EE00907930000AEC179433440CB2B302AE294A056B60A569A3415682C37B083F26F90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe588519.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe588519.TMP
Size 392B
SHA256 1fc36ad3c7e438d7b63f7365a458e27df0411ec1b789964ef9e17736b1a92e8b
MD5 9b21f563ba3f7101ed2930fa1f66b260
SHA1 cb9b47400f78ea68b43f6b920754601927b8189d
SHA512 a1073ff6006f7c69155b5770a3018573f3b5f50fd4c24ef647729592528b7030e32b0a92a0de8ea46327ec214f61a8f159063de9e7de76ef8536b5c7017985ff
MD5 SHA1 SHA512

Submit Download

6b5b90b2-a870-4b08-9dec-75d50f6f8ba8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6b5b90b2-a870-4b08-9dec-75d50f6f8ba8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 53739ba70d6a94312b4e15cb1279f18a75c798b11efde0affdf7a0d1d88088f6
MD5 3b37923c246f37249cf9165e373ed038
SHA1 0753a6876ef4a2fd0911dc75260c95525d3a1d20
SHA512 d01cf41a89e6160cc5a6ce094e7782d112a3b77c60a1215184f28df11309f40e11a4464a1417d0d2cfae68eb7524d234d6ebc2b9a83d5f462ae0b217d5e3fbd0
TLSH
T1B5410758A6EE1148B3B36F5A9BF7A46E487BBD332E07D45D00110D4F4A26B40C972733
MD5 SHA1 SHA512 TLSH

Submit Download