hxxp://unmatched[.]gg

Analysis

user interaction
yes
max time kernel
150s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/08/2026, 19:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://unmatched.gg
Sample260828-yl7xpaea66

Score

6^/10

discovery persistence ransomware

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
871	pastebin.com
872	pastebin.com
873	pastebin.com
874	pastebin.com
875	pastebin.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5788	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134324204212222933"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3986082593-3624157295-3514260330-1000\{75C0FCFD-F8CA-4C54-86C8-E574F9C3F364}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6652	msedge.exe
6652	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
820	Process not Found
820	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2812 wrote to memory of 3056	2812	msedge.exe	88
PID 2812 wrote to memory of 4508	2812	msedge.exe	90
PID 2812 wrote to memory of 5788	2812	msedge.exe	91
PID 2812 wrote to memory of 4508	2812	msedge.exe	90
PID 2812 wrote to memory of 4508	2812	msedge.exe	90
PID 2812 wrote to memory of 1224	2812	msedge.exe	93
PID 2812 wrote to memory of 1224	2812	msedge.exe	93
PID 2812 wrote to memory of 1224	2812	msedge.exe	93
PID 2812 wrote to memory of 3736	2812	msedge.exe	94
PID 2812 wrote to memory of 3736	2812	msedge.exe	94
PID 2812 wrote to memory of 3736	2812	msedge.exe	94
PID 2812 wrote to memory of 5888	2812	msedge.exe	92
PID 2812 wrote to memory of 5888	2812	msedge.exe	92
PID 2812 wrote to memory of 5828	2812	msedge.exe	96
PID 2812 wrote to memory of 5828	2812	msedge.exe	96
PID 2812 wrote to memory of 5828	2812	msedge.exe	96
PID 2812 wrote to memory of 1000	2812	msedge.exe	97
PID 2812 wrote to memory of 1000	2812	msedge.exe	97
PID 2812 wrote to memory of 1000	2812	msedge.exe	97
PID 2812 wrote to memory of 5648	2812	msedge.exe	98
PID 2812 wrote to memory of 5648	2812	msedge.exe	98
PID 2812 wrote to memory of 5648	2812	msedge.exe	98
PID 2812 wrote to memory of 5704	2812	msedge.exe	100
PID 2812 wrote to memory of 5704	2812	msedge.exe	100
PID 2812 wrote to memory of 5704	2812	msedge.exe	100
PID 2812 wrote to memory of 6084	2812	msedge.exe	101
PID 2812 wrote to memory of 6084	2812	msedge.exe	101
PID 2812 wrote to memory of 6084	2812	msedge.exe	101
PID 2812 wrote to memory of 2756	2812	msedge.exe	102
PID 2812 wrote to memory of 2756	2812	msedge.exe	102
PID 2812 wrote to memory of 1968	2812	msedge.exe	103
PID 2812 wrote to memory of 1968	2812	msedge.exe	103
PID 2812 wrote to memory of 5072	2812	msedge.exe	105
PID 2812 wrote to memory of 3708	2812	msedge.exe	108
PID 2812 wrote to memory of 3708	2812	msedge.exe	108
PID 2812 wrote to memory of 3708	2812	msedge.exe	108
PID 2812 wrote to memory of 924	2812	msedge.exe	109
PID 2812 wrote to memory of 924	2812	msedge.exe	109
PID 2812 wrote to memory of 5836	2812	msedge.exe	110
PID 2812 wrote to memory of 5836	2812	msedge.exe	110
PID 2812 wrote to memory of 5836	2812	msedge.exe	110
PID 2812 wrote to memory of 8	2812	msedge.exe	112
PID 2812 wrote to memory of 8	2812	msedge.exe	112
PID 2812 wrote to memory of 8	2812	msedge.exe	112
PID 2812 wrote to memory of 4468	2812	msedge.exe	111
PID 2812 wrote to memory of 2784	2812	msedge.exe	113
PID 2812 wrote to memory of 4468	2812	msedge.exe	111
PID 2812 wrote to memory of 4468	2812	msedge.exe	111
PID 2812 wrote to memory of 2784	2812	msedge.exe	113
PID 2812 wrote to memory of 2784	2812	msedge.exe	113
PID 2812 wrote to memory of 4132	2812	msedge.exe	114
PID 2812 wrote to memory of 4132	2812	msedge.exe	114
PID 2812 wrote to memory of 4132	2812	msedge.exe	114
PID 2812 wrote to memory of 4816	2812	msedge.exe	115
PID 2812 wrote to memory of 4816	2812	msedge.exe	115
PID 2812 wrote to memory of 4816	2812	msedge.exe	115
PID 2812 wrote to memory of 4328	2812	msedge.exe	116
PID 2812 wrote to memory of 4328	2812	msedge.exe	116
PID 2812 wrote to memory of 4328	2812	msedge.exe	116
PID 2812 wrote to memory of 5504	2812	msedge.exe	117
PID 2812 wrote to memory of 5504	2812	msedge.exe	117
PID 2812 wrote to memory of 5504	2812	msedge.exe	117
PID 2812 wrote to memory of 3200	2812	msedge.exe	118
PID 2812 wrote to memory of 1532	2812	msedge.exe	119

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://unmatched.gg
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d4,0x7ffa0b8ac188,0x7ffa0b8ac194,0x7ffa0b8ac1a0
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1536,i,2755647383297827212,15747927312754426679,262144 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1744,i,2417402066754533610,145417785214657392,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2320,i,13009627526592753067,3678087664385982747,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=3308 /prefetch:13
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3340,i,2366384987766257875,11782167851392816108,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3344,i,14033510678187305938,17456477872980400668,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,6189775219624955962,5697461326039534919,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:9
  2⤵
  PID:5828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,1360258426640763379,5319250329617859809,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:1
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5252,i,11956070373584249665,3357364915951524392,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3724,i,14392070142853401950,2467858248011026174,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5424,i,9725645652470798751,9838663218957415758,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,8304585933061398509,2526487910942631957,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:14
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,981805384712513285,10088366687778224176,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:14
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,9920258391936246410,8441239857647636991,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,9920258391936246410,8441239857647636991,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=4196,i,10113276035455637940,336683845219337160,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,1725709597045437581,3059634766454875548,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=7132 /prefetch:14
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7296,i,164480105548966177,4908270972255673880,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7444,i,13540083555250077904,16680965177275974692,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7268,i,10056460190229980683,6219644310233424837,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:1
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5124,i,15169636480599543961,9179860468271868173,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7896,i,5523920560168389555,12220018350071178920,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=7432 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5240,i,2121944354688367631,222725227686380605,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4208,i,17336729352619929651,18278982724912295550,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8064 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=8280,i,9296441114220243254,4845085941877954318,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8296 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=8336,i,6855190330224538240,11343185139770673054,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8472 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8536,i,4978096808078843011,12021498894532069351,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8544 /prefetch:9
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8812,i,7141031744180211624,13089073298526176698,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8856 /prefetch:1
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=9012,i,2410877294883397952,16239469122757613356,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8360 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=9156,i,5061098026592718014,4969438783564618680,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8744 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,10936548712146859747,9148956160168516770,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=9340 /prefetch:14
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9276,i,9704439096577926330,14570276167161236306,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=9352 /prefetch:14
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9296,i,373507196245599841,15701549346402908111,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=9384 /prefetch:14
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8344,i,3724647018512226206,1248859062263753007,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=7904 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8208,i,5183269210737326196,1550525124649614158,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8784 /prefetch:9
  2⤵
  PID:6816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=9652,i,2777370530135561444,17768246445284030416,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=9564 /prefetch:1
  2⤵
  PID:6832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9664,i,17303999938259795071,10919481555395982960,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=9820 /prefetch:1
  2⤵
  PID:6960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9964,i,4722660388275433148,1302230978123175221,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=9996 /prefetch:1
  2⤵
  PID:7016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=10112,i,9088101849773713073,9268361201638874567,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10120 /prefetch:1
  2⤵
  PID:7072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=10336,i,8680194482880938127,6807343666732258963,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10340 /prefetch:1
  2⤵
  PID:7164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10536,i,11153059920839859299,6831689443903530476,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10524 /prefetch:14
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10532,i,17416416464130744860,2793040935448778725,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10580 /prefetch:14
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10528,i,15657788893115623297,3432187658298447127,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10480 /prefetch:14
  2⤵
  PID:1916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=10672,i,6661875301596517029,5401919587388497381,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10440 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9296,i,16315033573554207387,13180305613329791352,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=9460 /prefetch:1
  2⤵
  PID:6436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=10840,i,1550595574190836570,3767241416825456264,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10704 /prefetch:1
  2⤵
  PID:6272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10976,i,8579805639485949443,18361721757990096113,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10972 /prefetch:1
  2⤵
  PID:6452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=11000,i,3029828622295069910,17521032275939606574,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10996 /prefetch:1
  2⤵
  PID:6596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=11276,i,16002838396075602976,9801758497008331558,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=11296 /prefetch:1
  2⤵
  PID:6624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=11464,i,2130409182696458128,10216682331440302151,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=11500 /prefetch:1
  2⤵
  PID:6520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=11412,i,13036588728995223433,6191202085648163297,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=11420 /prefetch:1
  2⤵
  PID:6600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=11732,i,18258907317755577530,3160613255123817995,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=11760 /prefetch:1
  2⤵
  PID:6728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11912,i,7201646946954033521,17305172835333681792,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8808 /prefetch:1
  2⤵
  PID:6892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11464,i,3705480313119678046,6558113376289691292,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=11472 /prefetch:1
  2⤵
  PID:6952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=12144,i,13633080656708006975,6086439345948237771,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12132 /prefetch:1
  2⤵
  PID:7148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=12124,i,663419251192864469,10847788243361778155,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12168 /prefetch:1
  2⤵
  PID:7140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=12420,i,12551113480422075002,16651089043384988269,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12436 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8960,i,1268603239168100342,2753483336773971728,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12548 /prefetch:1
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=12712,i,6039336897641228411,12687854636371826238,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12724 /prefetch:1
  2⤵
  PID:6448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=12864,i,4747406526600372784,16532069551336669096,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12860 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=12220,i,8140905283745986567,12845847517934393232,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12900 /prefetch:1
  2⤵
  PID:7204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=13144,i,5611936213454516154,14092508940617251011,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:1
  2⤵
  PID:7260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=12604,i,5793777709606871773,11244488137569104060,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:7948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=8868,i,9882729415119441467,12199025984017228024,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8896 /prefetch:1
  2⤵
  PID:6248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=8232,i,1781337553998229136,12848112453993242759,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8944 /prefetch:1
  2⤵
  PID:7452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=13448,i,13610181581537103149,1206636308585743381,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=13476 /prefetch:1
  2⤵
  PID:7908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=4968,i,17445252542352908328,12765223754837305736,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10852 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=9984,i,11113997496208895132,18277930940898835668,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12216 /prefetch:1
  2⤵
  PID:7624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=11736,i,9829415081138629639,3199251957500299335,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=11160 /prefetch:1
  2⤵
  PID:6956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=3352,i,8884249693891969141,17957733453360968999,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8012 /prefetch:1
  2⤵
  PID:7852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=11724,i,6004060072710526409,13463603767533870391,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10084 /prefetch:1
  2⤵
  PID:7836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=11956,i,10846907081428229437,14405473873378777078,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=13668 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=10176,i,17159707666326981795,11397680523123013529,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12128 /prefetch:1
  2⤵
  PID:7132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=10268,i,9537760941609634106,17826413613129516546,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=10120 /prefetch:1
  2⤵
  PID:8092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=11648,i,10521732199161264446,8020683563683074576,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12892 /prefetch:1
  2⤵
  PID:7768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=10060,i,18194382458506502524,4900342016397084016,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=11484 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8976,i,16673617879132786699,14582076238565909715,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=12436 /prefetch:14
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=13504,i,6692890463710387032,7438281055445654692,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:6956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=11236,i,4705146901637814944,11680578683759466360,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:7360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9960,i,14514598588922117346,11061297019380702629,524288 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=11520 /prefetch:14
  2⤵
  PID:7128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=11736,i,16125319547725652622,4667065993476590303,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:7892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=10060,i,6292252594652815069,11927206493666730602,262144 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=11528 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=10060,i,7770407972145760282,15607396711108344472,2097152 --field-trial-handle=2268,i,15328088826955894524,4171769218885599005,262144 --variations-seed-version --mojo-platform-channel-handle=8744 /prefetch:1
  2⤵
  PID:5076

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 dc3cbdc636712cd0ad246adb60e10a6c82511eff5067261c392024fae841e7a9
MD5 c1825e771385238aa2866582788cf8ff
SHA1 cdd34f1c740914ce98dfac6172ecd00fb2da9783
SHA512 33f14925d45545eb4c68af5b5b273b9724142601b0f5098ecd00afa7d2c73115a7bbfbde0f2118a5645868d8b32a69bd2a748d5d5a3d469656956f8af0313fdf
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 da739d58d61b2ac7b5d9bb7ad60982cb15b364d9c7c9297fd0c9719c271cd985
MD5 2d2e0ac0da9a175b4b6a8be7c9d51cce
SHA1 ff15c8a5ff11faefae3f7491c7968a2163702b81
SHA512 0ae78f15909f04e1a81109917b8eeb5b8062a49558d8a40f15c02076b087f36e82b88b329e9d984fc68c62cb15408123b9db7f705f2745bfefc30b5aa2e164e6
TLSH
T1EAD09B5A72455D4CD641343224E55217E3108821754546194253F0768DD668717ABD9E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 18a644ba613d5b4137dabc346f57eca622b6888922eaec751025ab3c0a002fd5
MD5 5eddc74c05def624cfd47ea0a7e304a5
SHA1 b5f795fcc3846bb781e66e0373fce119975b2659
SHA512 1c777d774c154e89b80817ce7344495d83eecf133c36e0ad7c60dd14d76e628697535cc3fc379ca4eeb776f3bea5096f94d0fd76a2394ecd2e52f5ca8dc0053f
TLSH
T133D09B5672455C4CD641343224E55217E3008821654546194353F0768DD668717ABD9A
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00005d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
Size 33KB
SHA256 539628bdc4f3b107aeb78713c741ab9b5f4737532233506d8f1b1fdc4c81040c
MD5 a06c8f49a760752dc8b3ee4f217bf4fe
SHA1 2c159af5b7341c03cbce67afffafbbae2cbb7787
SHA512 af3b5c625bf4c83616c3ae1e2380df3bd35119998ca75cb96cd590c18b9227d18a03a50cf22880ddf41edd99ac7b8b9918c93a7be90d4dd3a8e6602c8e2b519c
SSDEEP 768:f+QHjwElyDV21n98SlMi1MEOV1IyItHdLqO:GOwKyD01n9RlfyTVJYRqO
TLSH
T1F7E2F15B2127014BED8CA143576EFB4FA9E374AC5609A24F547BE0AA7B8938754BD0C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
Size 96KB
SHA256 00b42308115826481315f6a815745f8d445a89d855fa587f627b7b4388810023
MD5 89341da90f4120b2461a9bafeef01775
SHA1 90e281f4ff94fc0eaee2e876234884e16f69894d
SHA512 bb3e8fd234ec764c6450622ff2d5f2e6e777cac6006fa23b9c3e986d79b89911b9a57ebca3bb3f3e15b8437d0b305634eea968e7d8808188efca4840bf4d5112
SSDEEP 3072:OFM4gnEp7667akyq8ez5pqVo0cvK4Dhq/8fQVT:8cIwdq87ouczQR
TLSH
T1F8A312DE415A5AD9711B87D540A18F2E140288FDAE3AC206E3C7493E1D7E1BED2392DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
Size 68KB
SHA256 7c1587a8deb920144116f76efe8d9f9c1cbe3f4075b7ab0b324e48196aaff7e5
MD5 17ed453315625e4e1252985fcb178bc5
SHA1 b3d861c8364d97ef88f6a4546ab911061e66286a
SHA512 64cb3bff0a0c2dba442a106586eb8a98cca75092d9f358aaaac4e9345b54f4b715c7571f70901fb839212dea630c12a0e5c7c9370564c3b7f7f0f78da50fba7b
SSDEEP 1536:sib+w2yTqlHVzWIzNM7wPrKZPeYim4SantVBG9Iox+AFziYas9lO3fJ:ZHTqp8Yx+Z0m431GKo3Fzie2J
TLSH
T1CA63020BC0419970381741885CF8E86E1FF678DDB8327E9BF6635FB5A2E47E441A7A02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 406KB
SHA256 241fd5d8ef62bb6b85a44451ec96f97934f1342a67e4bce6b60ea50f83eb119e
MD5 869b7596684a08381c0814712870c0a8
SHA1 f7eca4e949fa8be787a9c77726bd65ba275c6db1
SHA512 9955d4f916b05d7402b10471e830075dd4fb3d7e065f6c5df05bd80cc97334f5381a7279291ddd5ae64900bba4e7a0f235f5cfc62d2d21300d0193c278e49bbd
SSDEEP 6144:l8ZlsOnEwKTVhxcbgI9AXFt5/EZNGxiGT3Eblh5/pOPEnrAfArjMK8+U4P+la6Ib:TGENibX9M/EZISf5x/rAYvQx0b
TLSH
T1209423786BD676F72BB8603708F2123508D17CEFA1407B2F590B9E7051AC4B79652B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 204KB
SHA256 e68593702271a321c4c744986fa81a3e6c4b5ed3e5618659c1904027417cde96
MD5 ff1dfbab3b638aa5bd28ae87778e5f19
SHA1 3f3c9bc417cadfed13abe0bd6b200d491bb76fb0
SHA512 ebabd2fdc59ebc5f758d4446b6293503712339a3474160842195bdb5d31023633edcd3304e4220bb9d8556c453440c644af2e82ca73e666031ea63f22032ad13
SSDEEP 6144:RFNHZe4V269134r5p1nVGGfqzSAAEicJfcD:9ZeY94LpqzTXJI
TLSH
T1552412D10DE5153BE2D9538FACFF6815607C948EC0F84386684E02AACB76F7574E21EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 27KB
SHA256 64e79147a82c808d8a3daae687c53b872bd0f3990445a7d146f16d0a5bcf5148
MD5 f1d6ac69d6247fd7d5a820b1d6b5112a
SHA1 26f6a525b97b7f2a9c008e8e4fa6a193091e071a
SHA512 3a2cb9a7defda2b8d3479cee40457053e50b41974ec090737e3c8a77b3d6b697a3b49f446d02422f6ae9a98c50ebbecb2a739670fbb0bd70825344a5a874458c
SSDEEP 768:itNT5p0OyEHO9J1EMdzwfKgbcNHC1lgET:QNTf0FEYNdY9bcNiIC
TLSH
T107D2E106CA539FE6238354A5473364DE5FBE12211123EC108421672EFADB59B7BCD0F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 77KB
SHA256 41b11f538600d39449707c3c4059c414e43f459ed1d55d550c86295a4004049d
MD5 5608df8bfbd41cb60bf28b81d8d61efa
SHA1 9a21ea7361f2d274de584f06d7abaa786b9dd0ef
SHA512 48e5cbac75244db642db3472b90a4ccc65500aa6f48c80f9f020db94d5b41a2c05d3234128f1b941d23532770cc284c08c301f539b06d552776073d2d40bba21
SSDEEP 1536:TRN1p17WrnJxqFm2yz51VSw4TiQrFNiCe8yCdn5jr3JrLe:TxKJxqFJOSfZYX8v5jha
TLSH
T14B7302E1662B82E7F2D2C5611DBDA04D0BF17F9EC598BCCB07F25A0C694704BC6A6132
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 17KB
SHA256 0a96ce4e17aa543f134a84ced22fb1d3fb5de324daed774d6a6e81b19d658815
MD5 e63060379476ddbe21268b03358819bf
SHA1 c05850c90ab99d0243d9fa477a28fa11c2ba751b
SHA512 681277d31253a388ed1ea375f884ce691816cac34624989f373be21cbea940ec8812d4c8f04b72e02ebd4d4a7767ab429e161034b5b55a79b13ce59ef874c963
SSDEEP 384:VrbiTTkDo4k7397zhy4GG3CSmCL+er6FuYNStnGinCV0TfS:1HD2Zhv3CjCLNuFuYNSt+QS
TLSH
T1AD82D0563A13983C8E368D627729F95D787B9CE4562BD6A764FC7A93C2271030807351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 55KB
SHA256 fdb455624923892515b3019180854df0842f5a82e5d38996340e57f078769d86
MD5 80336c617b88936c3a80611620c79e77
SHA1 174db3b97029cf134265cf99cef6701f7dca8572
SHA512 640a65d77a2b242d98aa9dcbd231fad93fd159764df9b2cba266bdd42f57cc071c5d8573002db6ce1687322bffbd008e61886949e1a9b4fedb7c372bffd4461c
SSDEEP 1536:OUc95L2p0hgchot8lehVCYeBjZ71KVDLw6G:7g6p25VwhVCYYjZ7WwV
TLSH
T103430221EBD2EFBD29B028DFCDC535E87C921A666721DC54764F3084AE9C117E48886B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 62KB
SHA256 63f49d4670eaf4ff0eb6797d348d8b631d3b13130f1b5b3120e78133b084aa10
MD5 8cf7ba3107d38608d2586c334dd5e92b
SHA1 6cb945678bf39026c0697504b44405698e838f03
SHA512 db39c3425e4d068fe91fd09e224b56fb8db9c91608adcfb61fa907aaf5c651c62219a8e94fb4e4023800397a6b413cd457b3a9d0098f14c67aeb5c2560d9a56e
SSDEEP 1536:gQWCWN1IvxtzElHmkQy+0gC1L6M4spuwxkN1f:XWNirElGkQ2Frxkj
TLSH
T1B05302639A2D4CAE424CCF4420849671ACFF345D228CECF964DFABA119330961EF7C69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 72KB
SHA256 95a6f520dd72a28e45655cbd569d539b89e998c101f0da1b13cd0f86dd959c0a
MD5 5c47384ec36dcc0c5d02005309cc9290
SHA1 85f74aaf6c807e4510edc77719babe519d6b7531
SHA512 83501f504fac3e96e8e48675b2c6658a42acb0d0010a25addf856f9c6cd365f1e3c5acb534798c1826a60360d40262b15722fba22bb66f89eb0aad63334ee0b4
SSDEEP 1536:ZLCJq89mkHGOxvzYiJxCglsovhk8+bH6BTVDfAFfdfMgDT32QckErSQ5iQ:Z+M8xGYzYiSglsoqbH0TVDfGb7ljErN
TLSH
T1E2730235E27CE599EFC8D13670BC086910409C7F8DC29BC555C978E8E8A7F934768A1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000068

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
Size 50KB
SHA256 0a0eedfb150f41300f928b6c973df8bcecd974677da599e68f04b062b3a3b03b
MD5 5bb52afb5f84cac129b7fc16bdda552e
SHA1 4ebee307bd0f42d85017ebed4806ab12bf24fb87
SHA512 750e42b88ec9b4f710321356536c965adedd6b4aff95f17bda9525443229e1605ab2c4fccc5211682e9766fa58bbbdd0ee82eb910d4e8c86f6eb132c8effccf5
SSDEEP 1536:CtkFbzc0b2f3R3TJjQLsNgHz5HoI9c8owsoT:KkFvc0bQ3RjJj0HlHoI9vowsoT
TLSH
T1E633028A644F86B7CF42C71442355117463E1CC13C66B72B01986AEAC94FEBA47BC7DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
Size 128KB
SHA256 0825f050d4365e786b136532ff665fdc5f7aea536174b37028c57f0ae48b269f
MD5 48ecc5d2315ff123241c0b4d0f34a91a
SHA1 6a12e180f691280512127d28abef74f9e2fc045d
SHA512 beb7516b76184ef936fdeb482bfcc2a2777c1e5460a78531847542b6ca077980a6297d4e26f7bf230c528cf8b6d44f8be1cbff47da093193b67a5e16efe34698
SSDEEP 3072:FEJlk41bN0vbRuAygSqCc8KpEsILReSHW2Hkv:FE+5yg5Cc1pEsIsgQ
TLSH
T1B2D31674FBC3D781CB072ABDA43C3E730B5511D221C90A1B4A636D52A544FBAE62763E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 71KB
SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
MD5 8f850aaafc8da0df7f8f0a0b682a934b
SHA1 ef55df2e866abed76fe19b05ceb51c1147a6961f
SHA512 15160500824282d1e829908670dc7405abeb4d571ffdcf94532f55294fce77552c832f27fc14b91141ffd2aa142c441fd8e48df8e43cdbfe9283a043da2460dd
SSDEEP 1536:m4kLBYkMICj9ZBz3ff3Vpsrc6gy86ywUOWo3xmWVNKz/8A7yWuBKZS4PHS:elsr9Lrf3VGQ88hLoxPq/N7y0ZS4Py
TLSH
T14573F15242B8D90C1F6550E30BAA1EF1CD6B18CB94D4A0CCE8C7EF9DD259EAB4D66880
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 512KB
SHA256 0e169dfd532e84c92cc907faf5b74f77c485659a069564f3fb4df09db5d7d473
MD5 33b8b8aad927d1e6649e19fdaf5819b9
SHA1 a629d5a71aeb436d6ad8b959291088951921d7e8
SHA512 f4551060dda057d499f4a8e7270af0bbd24ffb0f69331198e4975c8c911464aecbc11cabbd8bcb9a99f9ef059bc432a931f92083646e0f435b41238e68baf851
SSDEEP 12288:bOS45uyruFRW8uJOyPmhmOW2QJUVtVpSi4ky:aLsyrmWJJHP92QJUnJ4k
TLSH
T195B423565F931C2FC7FF2232F19BECC35A51A2AC20C82D35FBC454AA619171A9B285C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 256KB
SHA256 266387d6179d8cd4661ef22124dc479059fe8e40758feb4022b2cca865cb654a
MD5 fcd6fe1438e4149e6a7128144033a8d4
SHA1 360237dcd048317694abe16fa8d8e9d0445969a2
SHA512 24b22bb6a1388315f42f20495d5593da0ec537840f9ae46e4cb71cb090f1611d341492f7cf091dcacbb8d85478f4e4e51e45801b505708bab2e597717fe07fe1
SSDEEP 6144:fc89w5sS4So6X7GUfKyxW12Hngz1DwVETKG5:fHQ48XViyxWjZ3F
TLSH
T1E6440250FB564388DB032A36E4583E671E626AD530D37A0906A4BC12F81699FF33FB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 512KB
SHA256 2ce14807456d9567337ed7cef963905cb0267568af3a4435fcd075005da39eff
MD5 17fd754bd728e9dd2c1049caa865062c
SHA1 5b90defc04d8fb1637fc47c324afc16adff23cda
SHA512 533888eae9b030798bcf9ac67667e6b33469f24b023846efde6a773838b131f262602f555969f2d38802d1182a34d74734fad327a0a13c56ccb851c0d301a36e
SSDEEP 6144:jtKfPCQIXMD8ARnTGCkggHtc8NYJRNna/vP0CSc:2PCQ3HTFk1N2NWP
TLSH
T1E7B41235F6C38780DB1366B9B07D3E960F5606CA25E6979F27337C41B881225FA2B50D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 17KB
SHA256 66610b8e5c198f9cc7388e22e50bfc1fdc4de9c0b213fa388149a9f369959fb0
MD5 57a12076fdc7497df496af99cd48e3ff
SHA1 e3799dc9db3de6139be953f94a5c232ecc5ee676
SHA512 d42232af42e1a5358e457f29fe02539d34a09bd57ebd0c3b9251dac1b754e6adce88e13cbb2681b133fc470a04624d7d9b6e53c04e94e5b65e7e3206f8c8013a
SSDEEP 384:3WY7lfMu4xhU3ADn7FOb7D5STlDOxUYtQZ5nYQjEDPvjc3Dtq:3WYBfmfT7I7DCJOxUi9MIXSRq
TLSH
T1AB82D1715CC6DD2C80013A69399CB23EE026E4769ED4FE2B78C628CFA69CCB39713455
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 19KB
SHA256 0117cfa2a1136f57064a7547e18865ad8f82468665651e5353c3d9444d761b61
MD5 092500b76404bcaf17cd92f4030f2394
SHA1 2f5d84c1d599b4775281eb6cc9590b64991c8849
SHA512 0b3181b8bb6047aab016c5a49a62b88150e3ccae554a58a288ff8e7a5235dccda595807f73a25cf536aa8bf942f5150cb0a879711712a85fe4f0250b66dbc1ac
SSDEEP 384:/bSPeXCuuRAktVjV+Qr4ZP52aUOTxl5sFzSgRHs4CiE6/Xd1fd1M7Nj:DSPSeA8a/ZP5VBsXU6/l1iNj
TLSH
T1B792D082505279DEDB0F5AF05A4735E7EE5DC6CB624938BB11C23ACD254F648F08D838
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 16KB
SHA256 ebcc0081f9761bb207ec35209d268f723a058c168013f15b1a401c92e25934ec
MD5 2cf8c574a39ccdb4eff91446c82eed65
SHA1 fd9cfeb4c4bcb34e2f40faab486d5d17c14943cf
SHA512 4b2d9d53e1543f0a35f64334440c311102e5a89cd95ed67fa936c0c1b1a62086abd95ca66fd89332da8ed292313718a9146b0c6505e6a750dbb7b8809653d8a5
SSDEEP 384:/TUjwI1S6QqeYhffUZ91ICdZ6ea3mm39WRUW+bXfdl2taEm4WhkXi:/bI5QRtHTdjat39rW+blVEiKi
TLSH
T14572E0F9572D2BA317C97E2D311CE53B22E70132466A00BB9EB96794BF14081D5E5C35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 19KB
SHA256 2b8fff4d79c0ed10aeceff57bb3bdc9fa5d773a8893242d99094a3b4dfd40cf5
MD5 41ffaa37d8050a6845d833091e52f36b
SHA1 b1494afee2ed30b8e72037d2d8289d3fca2b8524
SHA512 d7713b14b8be6b05ac266eead6c2a07697f588173024f917800554fba581a80b1d9f9f0f330d06cd54c586b5a50b53076bc22bc3a4753c699a12874a0bc49e4e
SSDEEP 384:scMGxsaS3GSj1RXAMVpcx1TCgZSIlPggYngQkIl9Tmt:vrxlFc1J7swGJggYngUlI
TLSH
T18692E005F21E86523C6DC6A10550BF29BF807A8A60FA4C4EADA246BE345113FEF0625F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 32KB
SHA256 6349d4b370e9c4f6f1934b55af2e522848dbe60c605ef1f2e453f69f74ebbb11
MD5 4b9d235d12e5bab293d5e11c7547b907
SHA1 32c425708847a95ccb3aafcc6887cf7d084ee2fa
SHA512 9518c7936690490620e3f6d1d4e1645a275fc525f532b36cd3bb4c481afed4ec2cef6f13ff3b11d5383d292f943b78e59e1ecdf7f1be086106fe9b34ad9c4a85
SSDEEP 768:YzfjThjpJz9KsQwI7pe4Z/gOebfqiwFZpmd/ByfiNdA+rmb9U/L:3UF8tiwFPmdJyf6dA+rnT
TLSH
T1B6E2F1CD23242F70D7AD4DB846418D195C9C7A6F458AB62200ADD072767A3CCDDB2BA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000076

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
Size 37KB
SHA256 0599b3bd6d1ac018ffa1d098953b17ade5e646069f600b1f912ed258bc2df2de
MD5 4e40b232f5cd159d5091d195b84b8ad7
SHA1 807d131eaa64e9f87e9ca50b1468ab8427bba727
SHA512 0bfdfc0da0e6b6e4c7aeda519d23de58441009aacd03c39deb9bd5c5cade4e260cdc9e9dea33f1fab7bf3aa451ba8519ac269ad3ebb92c1162cbe5f7cee76157
SSDEEP 768:uBiCJkonC2BO57tjkUJIrp7ANUziw24haiSqV0ewfBAwkkRPb5Pgr3OtSc:q3konC2BYpjbJQCUzi6aalwZgcPtIWF
TLSH
T17003F1A1CDC27A712D8D593884DAF4D04578FAD998162731A25F0F34A3B1297774EFE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000078

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
Size 16KB
SHA256 fc3977d2d169c184516de314eb5c88d748396839ae43c5ac2db9afb618a0b059
MD5 37f3872114c77170d343b701cb02f410
SHA1 fe0e539c1ed0b83fd989b801d65eb3021ee52e34
SHA512 4e13707040aadd14415156d90c90c2846b776260d285ad38309af4bebedc34dda744d3df10ce38a2440a8eeea29b46d4bf1cc4349681090cb9f7376eb6cf7f18
SSDEEP 384:PmiD7L/vPiOI8bjwWIPACH+XsqCkdYiZfVa5Qrjbp+:PmiD7L/vNIqwWIFecKd1Z4mrHp+
TLSH
T16772D0CBD6BF53638F5C4600BE18D435A0A7A3DF036CC84409B9669B2A11398CAA3A71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 77KB
SHA256 8588a42784ae04edad697b3cb48af7573ff63c75fda8f947ff9be289201cb36e
MD5 73f6968b06c278641f8450987172500c
SHA1 fc6fc934b4981fab55e0a76ec861417bf71f19b2
SHA512 f4a2f353196bfce5b85316fb03b77464626cdf938795eb8772ad9e2bc2d20c4cd5cac7da62563d0e7fd57b53f5fc74fc90909315855b5ec3510893bf0c91c351
SSDEEP 1536:Zwcr7QVBtAQnn54oAM+mKisNnLRWipt8wFTlnRovARydzBal:jPZQn54oAM1Kis1LRWyGwCvOyCl
TLSH
T149730220B74EE37EAB94305906410DCF3DF27A4E16D9AC2094F6DA3915D3FDA91CA818
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 18KB
SHA256 e20a00a1515c40dce399de85108e117f334ad3a6cdcb01d865cd7d60d2edb963
MD5 bd9e33504a5a6378ade8fcd5fbcbac04
SHA1 eb988c65a499c1c2cd64e4371e8cea618d70ba5d
SHA512 b588cdf299c19f43e91012da77ac32309be2ab64b50ffdb9c6e12682db30747a4975be26d20bcc7efa8cd26acf622e14a3f5dbe196c197556b729f2a394d0aa1
SSDEEP 384:bNmjcURwbtqxRi2XezHLWmGvnXdKV8TFL2twVeXLxbVsygrZK4WoCq:bNMcU+Mn9uzHLWmKnXdKKTFL4xbVsf4O
TLSH
T13192CFC91B112DEB206D452462996FCD42A7EA1E93A25E813C4C8037C76BBBCAD311DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 44KB
SHA256 0703a899582bb2a509d713c90ee4e7bfb4173db3102f9c7b0bd8b3a8b2cc47b4
MD5 5a695a77be8969ad6567bee7a4b10cb0
SHA1 b8184dcea660d9e6e7d1bd0dec2719dc7117d3f3
SHA512 ebe4a0c1968551c0d927c81777d8a99b9b8f7da924690e1fec83d8c04ea56b206ddb3cef56a1f9a06f9d2abcc6d7578468d1cc9a5fcde6d77e0483466392c4af
SSDEEP 768:pK/UTJ6+dGf/L6eZcIZPRNUrTIqTXgz3ka0UNuO4gh3QmEp98KTFvX5wUiXY:/zGW3OLUrfkz3h0UNPh31c5wUR
TLSH
T16E13F18D0173C8D746CEABA22F68B79BE0DC406726BFFF35F5E14552810D644A244A9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 16KB
SHA256 2cdfd16b0e167b02da0277cdf6fcecbe60a367032aa36838d2ce36555410bf20
MD5 3b13963353492ef7e96ee34554f5e51d
SHA1 52ed5adb3e6f8634a674386978947cdd9dd21726
SHA512 565251616748831e7b15b201c8c93018a184b2d10aa763f0991c0117703fa1f1b166ef36b6f96b743b9f3fb4e45ce57e3c5a701cc8f24c33cc182f15ed204a70
SSDEEP 384:1JjQg2PyWIsu0HnEvGUpCnX8IHXZQ0ttXMH+4XCMTpTd6bvRgVTuS:zMLPynJ0HnEO2CXH3ZbLq+MCepTMCH
TLSH
T14B72E1D8FD10253376621D21256324FE4AFEDC787366ADD5EA21833D0513694D53907B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f4
Size 21KB
SHA256 fd900b4f3a9e57f55de24dd642d3ee559b10d15fc36ddd402cd2e00812690d2f
MD5 6d9f0968d4485c6b2493643688a17bc0
SHA1 b8c27e7b6cffb97b86b16ccc499f66f94c420ca8
SHA512 db59ccdfd73df6ce25737dc78c824574533c3b07ae53bba62c97f623d2777af325a8e154a1cb7cb2d4868589dd788d3e961e410533250c69998c620e1a97dd68
SSDEEP 384:C51s8Rpo80j64GGkWU8xy5fKU52jCDTVnxSB6udjxslV0LeY3cXqi0voS9Kx5Pk:u1rtUvkaypXSIKtC1Xqh9yk
TLSH
T163A2D15F944E46861B22C27FB8E474F989767ED1FB491E072463331BA486B20E2EA741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000120

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000120
Size 92KB
SHA256 b91379ad65df898c71351b21c177578d43c9f1a9426514c00617132359ffba43
MD5 b688825508c5544e306b629057b7fbfd
SHA1 7a0330ae8bca8686d19bfadce73510aba9022f3a
SHA512 45faf1bab2d27e6e4fc7b304aeb17145c07b5d14a83cceb7547367e91b7a4b2a2ed603c75aab9d4ec16896349235b9cc6871b0748e642c08469b702d70fffd5f
SSDEEP 1536:t8XCg5jQ/qNlJfUoeqS6kkFJtUXdG0uwdSHZsaegD4yGzFEGW2e:txEU/0TS6kksdoLRU/6/
TLSH
T1ED93129BBA93F59DAACF9E1B124ADBBE1209008440C45201F779D3F9EE7E0793DC51A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000124

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000124
Size 206KB
SHA256 f4a469f0f9a5ea338ce75faef7103b5dc50ce7833428c274a77949d0e7595a33
MD5 340a3d085bf17e5b1f11e246fc4a9908
SHA1 e781c085d1beefcb16992b342b477945f528d154
SHA512 29db59204a0b8d3cb58745f8f428b6f1ad437a0e004c6641b0e0699635301a996c0c1fd4f8789606878c1d28748b366a6cf5d4b85bf95b572a5a482adf70fe96
SSDEEP 6144:W0XUU+nhuzzgRgefjHDwzWsxPj3cFpVIDNTgR:WgNWhF+uj6PEvmo
TLSH
T1202412BDF279A9DC18C0490FE82518693E78D99DCEB83AFB46D717E167780453323251
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000125

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000125
Size 23KB
SHA256 a0cde7fe39c9c3e14dabe80fb2eaa7187457afe3bdd4c45b8914c8c10fe3dd0f
MD5 e7eb4788bab31992acbb02222b693d75
SHA1 546b42de82ffdc8fda15cded2d3c651f02ea4653
SHA512 00364af024125dccf73421841c9f6f4b38dc626fbf67b2a10e09949aa5b0d0aa3bb99f0b3e9bbb90eafb8a3cf2b7b837db4ef40f7749f3a4b8295f0468be5f00
SSDEEP 384:xGM44rWRufwWooALH5l58qgsmCuJkeQ8kg4GNoFDulWHwJB1Wj+5l9HLiCkgzJYz:serWRueNLZn8qgsmCuJwOww3Ej+5DHLs
TLSH
T175B2E19AE2A67BB442629D64050C5FC197631331A17AE7840B36B3369E7BBA4C73D1CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 a0c35dd286ce0eeb37d370229db53d6f9e60adc068f53df4a1e0df023d66f5f1
MD5 30925b0fad0f7655aaada751321c6472
SHA1 6be7db17996462b9cda97e52b6d3d5fdcff13280
SHA512 d75574c5a84f15fe62a05b20a06ab5277040a384781cb0267350d8503f1ebdaa1acd245147c3be64f3767b9fb399e1e74bb9c644ba0470740f357e1db6859d6e
SSDEEP 192:wExd4Db1O1p+fX6nVIbP77NCkpPgCoTkExnh1/CXT1s:jxCItCv5nmnh1p
TLSH
T17022B58D77CA21AAEF1C88B18791ED8CB6F134D5A0471F2ED186CDB516A3F8649F0143
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

computed_hashes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\iikmkjmpaadaobahmlepeloendndfphd\5.5.0_0\_metadata\computed_hashes.json
Size 47KB
SHA256 b99d08328d130af194be40729b3dee01724779388f15661df6b9686b1e38fc6b
MD5 e2cf91ccf374f1b11a50e178ea2796cc
SHA1 3d3b1d7f3804db51b6bfad05760f09edbbe35e3e
SHA512 8bfd63588dc54b2c7dd01f96533f0d92f68dc2a2d7f4161e5f03f4bb5906d570ea6edc5f71b8f4b21cd66f2d9958e9af7a8893663a756ac1cdbe536a52a7ebb7
SSDEEP 768:QtEdJePIZ2s0k4YI+g2s59MQolRydf9BC5J/tTnEiwXwGwUw3HYQbfk3Sf24p4c:GEdEAoE4YXgt8lIdF+1nvIXwdYsfk3te
TLSH
T12E23AE321E7EB1978F18AA842D030D119C4217D49E4D9DD27FC8D7B9B99E80F225353E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

43ebaecb-4c84-4146-a08b-6f5cea55810e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\43ebaecb-4c84-4146-a08b-6f5cea55810e.tmp
Size 42KB
SHA256 5568dea3dd9b69d4b4055d348de2e037edce44b450bb4387568b9eed63eacad6
MD5 3f12b2cf7a632ad5579ba7313f1628ca
SHA1 2af59868d13eef24235b1b24e5898681dd25d74e
SHA512 91942914b9a359f304fa36727729514dfcf8281857678c81c184f121684bc5f7a0ad2b083fed952cec458d4d3cb0f29f76a6f343e81f7ad37fbfba5956e20ccf
SSDEEP 384:D7LAZ96td6rleUe1q5r2JvkqnX90veaJ9Cb682BejCcbBejf7EMzJe/JpATmJ+0l:denQVpAHZYs8NS81wPEM1RxT6S6
TLSH
T1C51379B683F8CA7FDA11A2F55F142D2ACE580925173CBD2EC9D4BE1697E2430E24164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 0d00d4b6474f3921c624ce9f829ed399094db8271c74e1274706a0726e30542f
MD5 b26ebfae0c849dabfb5318c8e2de89b5
SHA1 f52fb2e2bff8426ba92f12dba9bf4af260c44efc
SHA512 6abf7ac0266e626cc2b0391e76e6a3c699e751add39b00d4becba9572b8309319cede837fc69a812584ee17e0c268dc4d5943d08b449f2806642c4fbc129329f
TLSH
T1F3D022F3170130F5AAAC3F81806BFC8FD37600385863DED850E4A89E493687C1E2B244
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 3db2db68ad6d6db34438599306041bf86e49895ddaea1fafc737f23af3893e83
MD5 4f94481eaaa15871304ef8cd559638a4
SHA1 a6fc18849973817b8a14ef82ee9a01a177ad73e5
SHA512 83ae10636922220af6e9e433b5451e19f82bae97afecb97aeb1cb1e810688791114b25a862765f1419f133505fa4e5babd77e7584e6aee7604c6b7cb992bb9dc
SSDEEP 384:sxRtMZmzG/f8s8/Yj7D6O4Gl+4/52XZ/Iip64:sZImzG/fM/m+O4GV/5cIA64
TLSH
T1C9920845A5209D7BCDDBD609F9117F63E7F81672D5905F08A6FCCA0C04EB6ED210681B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 15ec435039352de42b94da8f81ee855f48e2a51b45e58537ee3ce23fa840ac65
MD5 2c5f006a14e057f69641acef43f4e010
SHA1 e5c9ad2f40da04e6bfa6695200697f9d0b6dc00c
SHA512 efd2f050897fbb14048812d0984f00a44d6c3ae19d1d068d78d28e14d5460ae8dd949df80230d10deb7b1ce82d3e30009b4db6f36214a980150274046979a03a
SSDEEP 192:sxRTR6yM/jK1Ml8wbG/f8sqaYCb1zoA8pvZj/g6+WNBfo/YE1NPfGfPIgIJ:sxRTMlG/f8sqaPYV/5m/3is
TLSH
T11862F9056A246D7BCCDBD20DFA55BF53D6F81673A1901E04AAFC8A1C00E7AED620781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 3b99d776651d917cda7ad34cac14dc6f39115e7a4c331d9cb6de7705c480d272
MD5 ab79658b6e751abf2dbf2f7e5777e40e
SHA1 c672c99036a20f4e6c2828c4c504af1cb5bd9ca5
SHA512 f5bc5553b1d2a421a92344277cb3bb0ac1768a3db821781730c4cd9f989b82dc4269ce5d9dc44148bc3c0cfcab101208bc65d4639fc175b413c84f2688074966
SSDEEP 384:sxR4n+MkmzG/f8s8/Yj7D6O4GYY28/5aENolXZ/3ip64:sG+fmzG/fM/m+O4GYy/5e3A64
TLSH
T186A20851A5205D7B8DDBD209F9127F67EBF41663D9905F08A6FCCA0C04EB6ED2206C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 9d4441f5acb31bda398c9ab5498e1eea0f6c184288160c131f8f81b3474fecfb
MD5 443be472e69fbb997e0a5dc51ee4cd7b
SHA1 768a1ee943ea4a89f6ab970fa585543eda14d91d
SHA512 b5bdda62d4975ad829b77dc6f91482ee8f956f9e80bf1a23ddf70264db3c8e171c33c8e6e49c5f3a907eed670cd178fa4943f0a67335c813bb9b711a2df92d91
SSDEEP 384:sxR4n+Mq9mWG/f8s8/Yj7D6O4G0AXI/5aENolXZ/3ip64:sG+79mWG/fM/m+O4G01/5e3A64
TLSH
T1ABA2F951A5205D7B8DEBD209F9127F67EBF41663D9905F08A6FCCA0C04EB6ED2206C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 62d9f5915c9f20aa5fe1429480985e8c4d665af3257a2d86f0f385b471f42c10
MD5 a38425974bd6d7a58dd60706a62f2dfb
SHA1 08522a4d015a781c181e08289fa3c530cd7c6c70
SHA512 3b52f16d5029ecfccce49c85efff658f9096f58df1d6edb40fd67ec074a77251612ec84e387cd36a26f7cdafdd8a09bd49dea8811c6cc5c8f0518f51b4032102
SSDEEP 192:sxRwR6yM/jK1Ml8wHcBzG/f8s8aYCb3vbv5VoA8pJd6Chyj/g6+WNPwAm2foHy4g:sxRwMZmzG/f8s8aP7+8/52XZ/eio64
TLSH
T1C482E74165209D7BCCDBD209F911BF67DBF81562D9905F0CAAFCCA1C04EB6ED221681B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 63e1caefd0b343d5c930024c89c3523063761dc179d1de40d23b93de26d22780
MD5 32c137f37c50818d59a8f0a3922778e1
SHA1 a63ae2ce348407cd95e884d263a5ff988fab38bc
SHA512 028544ec22553f78df61cbca9c591561aa2752cd074907f386773dd00e4f8d2d5dcaa68504b1f403f2735054933c59412094fbc46c9e749ee414bae493a84277
SSDEEP 384:sxRzMkmzG/f8s8/Yj7D6O4Gxy2o/5aENoXZ/6ip64:sffmzG/fM/m+O4Gx8/5U6A64
TLSH
T1A3921955A5209D7B8DDBD609F911BF63E7F41263D9905F08AAFCCA0C04EB6ED2206C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 ad73a7196cf823843011c08aaa5f55e11679d97079d141b0713cbdb7fe87bda9
MD5 35959411741f33b18e64df607c2269ec
SHA1 179063ae74f12a0ce019e5b8866d9a873e5eb111
SHA512 9cf24bd1d802ce41f6c325114d479162a252d7ad1093177d05b76a3f2d4b3fecd3951e4cf10a47a8b70966da2bdd61311c0ad3736c24b3053e6b3a22b4097d37
SSDEEP 768:40D76DrQD8f0DbWgQ6DjfdQDF8F1+UoAYDCx9Tuqh0VfUC9xbog/OVw0DjGQDL6R:40D76DrQD8f0DbWgQ6DjfdQDFu1jaj0K
TLSH
T177C21B2F540CCB7F4F844AADAC29AEC66DD801CB57984D9447EA890C03C77EF521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 b89c1904b00998bf1edc66b2ad0c673d026a8e6e499a15354b8c7cc8b38a4d9c
MD5 67dd4d836a11eed42481d0714aeaabe1
SHA1 c42b47d464e45039ab591737ffa8c694d8517366
SHA512 6037c315538b83b71dd7af44f1ec93bf4ed31d496d2564983b26b3f378734ad3e76a0fd464d110a5ecca266ffd60d758f4fda91aa64a97063a72dc633f66059b
SSDEEP 768:40D/6DfQD8f0DbWgQ6DjfnD7M1j90AQDF8F1+UoAYDCx9Tuqh0VfUC9xbog/OVWO:40D/6DfQD8f0DbWgQ6DjfDvAQDFu1jak
TLSH
T1B1E2FC2B580CCB7F4F844AADAD29EED629E401C79A588D5447FF880C02C77EF521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\temp-index
Size 1KB
SHA256 9997ef50f560cf9cd5771a39b05e91e3e1e74d64007b12976e8802e4034cf8cc
MD5 f4407d1d0c5833980f398a3b6fec1f35
SHA1 513e86f0b2a187fe29d206bd351e5e01897c27c0
SHA512 07f8b90edf8593a4a82da3baab9802a5815188439b65e387306a422ca5be2baca8f1afc9ffe191e25c7a48c1631af4315c08158ee6ffe4d105af049acb48bb33
TLSH
T18931651BDD810D93EE90847104BB1E663336A2ED220C7E0751BEF1245CB3758AD8B549
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\the-real-index
Size 240B
SHA256 df444014503a08e6991382bd7f2161309dc453881f070a1274a1eb2ca1d59e3d
MD5 02157c38f0601a079b920273eac3dbd8
SHA1 90c9783fc871c02839aeec845eeaa93f2264475f
SHA512 4a1ff6dca62f1b49f090b40966cd994cd961facb9482b4d26ce30177299e51fb92b8eaf9d5e0a8031e1163605f5d7dab795e320e0e707a311111b874e0423ac1
TLSH
T18CD022498C6259A1DA12583300733568233302FD20066E2100BD141D556047C4146009
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\the-real-index
Size 456B
SHA256 499b470bcece09e7ef2227f0da2037371c45c762309dcf8d7401c05b20df7775
MD5 829ca38d42cbcce332c666a5589fab50
SHA1 a3e1ab301fea8ee3802eb2c8faca1a145e92b803
SHA512 f73c14551d64578051c1d69240992f20f916b3cbd965e6b3bba215d58909a380904251eaeee629faa1f04018914be4e46fb3b4dbef12ebda9365930f232ba528
TLSH
T1E4F0C02CCDB64661FF029431207B61BD37B202FD35086E1700DC501448536E89F07208
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59238c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0c259ee3-ec75-49af-a8ff-a5f337b654d2\index-dir\the-real-index~RFe59238c.TMP
Size 240B
SHA256 cb3dd23850c961520db069ba7f9d415a0b47895d2479c865a465bdd6e46e926e
MD5 ac862aafca9c26f5a05827fdf51ca5ef
SHA1 c0d8a6c0521025c3b357b4d39998ddb8efb20da6
SHA512 67eef02b011c81497ba125a65c14d662e4b626fa16179c82ae2b99639e7f54d376c18000816023e92b19556e6e3b6ede475463fa1de30bd621e0be1f2c81d4f6
TLSH
T17CD0C0CF4860AD70CE0719313003310933B70C202011EE3110A4040F08304EC958740D
MD5 SHA1 SHA512 TLSH

Submit Download

623cd082b6202da0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d1da24ff-5cb2-47fa-be82-7ceaceb68b49\623cd082b6202da0_0
Size 81KB
SHA256 9aee99bfea2482463cd35ab0491a1d6390af2a9b50f9ee1b8fc5a632d5cb13da
MD5 ad1d712ba0ed85483444938c58cf13a7
SHA1 8b10025ec8c9d7eaff6168b576a451a8a9a9e599
SHA512 b936f902b6d175f14359c50428534c822d6c7bb4470c98a0ec00cd3033397d8d350c589b989b34c2a787df493a731c610d56636a71fd4509a2a10f4fc89453ff
SSDEEP 1536:gFabK2++HqsJs0wihp2VMGzGX7HVyOAcU9dP2CsXMoTrjfgOu6qqHPwqYzGI/q:eej+nKMVMGzK71yO4Z2dnKj/q
TLSH
T196832BA6B262703587AC11D594567B01F22B17861448C8FCF07DA5D63B28ECB63B7FB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d1da24ff-5cb2-47fa-be82-7ceaceb68b49\index-dir\the-real-index
Size 72B
SHA256 6a451d54800b51851e7f3595a7ca2e563c72f3281a8feb6ca38814c1d4e81fe1
MD5 41b870d747eaa29141f0ab82f834e938
SHA1 47b3e901eff95a92c319ef4309ab603ea7b83757
SHA512 d8dabca45192a6bb84a9f3f05d6cfde22ef145f7dbe218cc4821483c0f616b4409844fe566ff8438cfc54b2ddecf50ba962fb0a96fda61e3b7fcf0d9b869828d
TLSH
T1DAA0022403C19305C01215F215A6C34132C098185300134EA4D20059CC658C0C59202D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d1da24ff-5cb2-47fa-be82-7ceaceb68b49\index-dir\the-real-index
Size 72B
SHA256 39514765ee898e85ed80b5e27d66b96cdd938d3331781cc7339ed1047123504f
MD5 2fd374c99e89d5fc14b1cfb4957dae32
SHA1 6479ce4c363142ad9bb24d199c41f8e4b99abded
SHA512 a139e5e4172e1f5a8d10af5c53ec33d228755c2d059dc72deab94da1ba7cbe82dd264e1564e9f52a12f3b85dc2347e2a6e826a03fa53b3605fe9b5797680950a
TLSH
T13DA0025C12F44280D50352B03E9A9AD11301CA101112133B41A04445DCA1D868E4500C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d1da24ff-5cb2-47fa-be82-7ceaceb68b49\index-dir\the-real-index
Size 72B
SHA256 198afcbd1c98085a47a28427c700800e4b989432cdb76b3ef7ab36ae607b47bf
MD5 f0bbbea4e7bd08d7e704e5a978691f15
SHA1 6d29eba0769071083fc0279797d7fc8694176d3a
SHA512 3f56e7400da3dd174308ccce647bd671f4c94ad5c130359f9661b3350ed0553b76a7734dc36323ee3e02721cfab66d74052d135890fb57abc1deef960f347dcc
TLSH
T11AA0022C12840200C81311B0776681C51310DF100602133F40D00445CC91E4A4E4648C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 37599d39c6f427236fbe72154cb744f6e46d35b308969fb95b9ad205ea297f90
MD5 6d78e0b26e44872852cbe7173fbf72b6
SHA1 a6c28c4ff1fa5197752b6c57c232a4f40f4ceea2
SHA512 fa4e23f505188e3258669f4abb2a66e386707f187fe76a04767160dcd420506faaa3e60cb863990ced47fb61796a09debdcbf23be76a274cf7c48619ae45fd4e
TLSH
T1B1E0C0FB2CEB1814EC7F83C62571C67101117828D158EC4E011A92C300B1365A886C31
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 5bc6c98277e5bfde303a86924090549437bb582ad412684edbeffc1b1f46a7a1
MD5 dbb3934041bd0c0d950c10737f134480
SHA1 6c01b605593e0481c0c12f7012422a2a208a9713
SHA512 20d996364e964bbc82ad3f22995eb1d28bd9df65f0ec49a8d1f17a649eda4ec93e24b4f11b736197f78ca504a81e98936b28bdfca72d1256986594ad9cffc1b1
TLSH
T166E020FB2DEB1818EC7F83C635B1C67101157868D558EC4E521A92C750B5365A896D31
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 1e389776d04cf1d96d6a4dc6659dedf1e0b1c6f5f0c9381a3ed0aa015c46876a
MD5 63ad5ccc819826aa9399f80057a56625
SHA1 5583742e77898b6bac73f10ef78a2b3eb0d4a507
SHA512 c404992f6c9a32f247ba21ca69bafb5565feb6d069b499ff03142c591ee2e28d028eb29633d737a28010aa1879b2b4c5aa2e65361fa60bd16e2521e6213daa6a
TLSH
T1E7B0120555408945CD8507B03291110E32628DF41103A35FD05822888E122818F61105
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 e8fd87171c01a73650ab834fcb3619b8b06688b8524003f0422df927ab4afba6
MD5 7868be603a63373fc99b14283e395bfd
SHA1 616157900e8bc44485e181b9edea1fea19b75fb1
SHA512 566d206460eb3d197862ff18ad42019a0fcd02df39f9c899d8ce75608cc9d596df57df590a9932a14c609d1217e3500b7baf9627609a641223a54a32650c2faf
TLSH
T149B0222E0000220BE80CCBB030C00A82B3328E200F0333ACC0E000ECEC3B3028B03203
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1510.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a1510.TMP
Size 48B
SHA256 d4ba48fc159c9b56624c17f11483a670f74c71cbfe57239b605b49c2c9207916
MD5 541bd6c12101e194233ebb93910e285b
SHA1 82faff80e74ec09e9eeff0a7707c23f04decd4f5
SHA512 7839d2fb8946ebf399a33d72cbee24c5b123e86e7adeb8cbc8bebd58f0b21a223a021967b469eb1ab1e0bfa88baf8a94ae46034e6a570974740fdb09be97d827
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 ff533fcaa4ecc432eba6d05ce627fbafedb8219f226fbe3e48379e904c1ed8a2
MD5 6e8e01d8245c106804bceb71d57ac6df
SHA1 64c8517230590c4a13a92abcc735e60440c08ed7
SHA512 fecabad33b690e83d0f546bfcb8d6d59e84759e7e452d91edacbfcc419c4f6834457ea7c485a5e076e5c87e9fb74b8f4e232b181b7c433668159c974367a9c9d
TLSH
T121A002281B445606C02C4BB1228167846710DAB56326535744A19159DE523D48E81508
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 a58dd744672e5afb3320a90c5a508b3e04bccd981feecf25f1964e74d96addac
MD5 950be4ebf61ff0692c4b74f71fda92bf
SHA1 e13c4d493d3b35d224df62409de9b94e3c4777d3
SHA512 42ccbf695eb0c69d5bbf2f1ca2bd01ce9cc4c223d0381dcd40b8789892eb436b29434e93de77918ed121560c8c1b125bf4e98b7ab3d8852e75e4e674a3451cb0
TLSH
T156B022BA0E000203C0200B3020C003C0B3B0CC0C83A303A300F082BCCC023C08E020A0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7132405585974269387d37ef1ce387d7f2ecab8cf70f45f03a07f16e39f8b09e
MD5 3ff19e20c737b5e62cc99445290a9a3a
SHA1 1fef6f98cfe319679af3ff4d9a4b7cba5574db9c
SHA512 215be8feb70bc1ca3fb4f5eea0aad5487fbe318b7884b784f3f1d400ce89d6324b121f4bc8a86d3f76482d920ac35cab28d1fd59f379d7ba3283330ac4a00e1b
SSDEEP 96:KRgBg+gPgrgZg7g/gLWgPgMg6ggTgLK4gyggdgLcgBgpgkg3g/g4H5WnjRzHDW34:CgBg+gPgrgZg7g/gKgPgMgrgTgxgyggA
TLSH
T14B9156C134BA42803C7F691D81F8D85E7282B863719DA47F3BA855A10FA7E424DFC5CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\index.txt
Size 171B
SHA256 2b545cd0c54dea22987a4e37588fd4701a5b4a75ff43f442b1df216d1983c5a2
MD5 7f5eea81af60fe8efc25a2a1eff20ceb
SHA1 a9751a0a31781ddf4de7d4ce5bbb305cec193226
SHA512 b9e29fd87febec8813b041a9bd123f105b11786c28816ddfd9540970cd45a91c1399a53c8e423ff8f43a6644a2fe71464271085daee8531d2d9ed31214fe3a61
TLSH
T1ACC08CDF5410844F0B74BBC4A120739CE94B070E48C8CCFCEC8C401530386A71E86A72
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\index.txt
Size 255B
SHA256 fdde6e5c69313288c2b4a19a5f7dd945bf0d0c60a1752d9d40291d5b655b380f
MD5 fc0e1127b38c97057ff072f0e21ee5a6
SHA1 2f47a0347d397760a6384e4d980f8a788452e92b
SHA512 911882c5cc19783dcb69de9c3fac2bbe7d92f1cf91de09cb95bf6dd95915992b4d699b601a4640f11b2b17652b12192b34a4a4d67baf29e66498420ba1dcc882
TLSH
T102D05EDEA630885B1730ABC4A535269DD9071E4A89C4CCE8E988B169307C293D985EB2
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59843a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe59843a.TMP
Size 178B
SHA256 785662bb358c5bc893c21afdedcecb64137ac55f75f5a9a28dcd405db9bee837
MD5 19226450fcdb29230b161b4a562649ac
SHA1 024f7396fd8f35eb2cadf418da054b0e373e00b5
SHA512 cd3701912e3e3545740ef6f19c3d326fe1dd7ee14c3d46f82f96012611e618cb68ba15e9b151a6666819577cf70506e5ef9effa96286c4efb43710abb6082329
TLSH
T11DC0129B5420844B0B70AAC1A120738CE94B0F4A48C8CCF8D889701530386675E49A62
MD5 SHA1 SHA512 TLSH

Submit Download

d8affe97-0f2d-4baa-a5c9-f3aa5b6e6116.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d8affe97-0f2d-4baa-a5c9-f3aa5b6e6116.tmp
Size 19KB
SHA256 9d802e7673b1c5b14cd7a667be43225672880e9a2f4c19ca995b6cb56157ae6f
MD5 6690f625ccc3371d845064e8906407fe
SHA1 ee7ed9ba7cc45f212cade8c7ceab727ea3678c2a
SHA512 acd8a36a65951bc64161d708bb5abdb9c1a50ada2089debf52febe31befe37ea76266c65313587e1563b4195c0e8eead973a71fdd5c0ec46994858765eb47e96
SSDEEP 384:sxRLMZmzG/f8s8/Yj7D6O4GKy2S/5PoXZ/Hip64:svImzG/fM/m+O4GKe/5iHA64
TLSH
T16F920855A5209D7B8CDBD609F9127F63E7F81663D9905F08A6FCCA0C04EB6ED210681B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59e0e0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59e0e0.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 413783bfd6bbb0a67fdda17cf5a75f4208c8356337167f7c4542528166b4e123
MD5 b6568f3109577fd6d62386114b54f9f1
SHA1 53e7097a492a9b2eb83573cb0f634c7ef34f99eb
SHA512 610f5c360c014f4437ed944a7b129d1d9d4b258b1bc6b8f485b2622c2249b88b1ca5deeaf60dd0c2d5070a4187993acc7594716710eec14e5272d70e57da96fe
SSDEEP 768:brv+4UNbdE3XaJoIDTd+ZXff0eeX6+qTko0u229a4vsTnU:bbsb+3XaG0vVTVKa4SU
TLSH
T1AC03BE31F865AAB38DE68684B11775476F791263CAC80F9499DEBB5C014F0AC230FD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 fddc0093c797d2a1294a6c1a610b5f984163b9d8acc81b1e8501c235063bb0f9
MD5 c71f58846778a5fd3cdd1c6dd0093f95
SHA1 29697f0c5b634e8d8ccb505913352cbf799b9d13
SHA512 cb5c82ec051cc6dbfb092d85d7d8cd8599ad08a4306d1d795742702dbfaf5d4daeb32fb6bf6d594af27a1599ddff2db1285c5d97c69d785801af5c2ffac08abb
SSDEEP 768:xb3PaJP+RDTd+ZXff0eeX6+qTko0u229a4vsTnVyLR9T:xb3PaD0vVTVKa4SirT
TLSH
T1E0F2BF71FCA19DB788E6D685B207720B5E791233C6C86F8099EDBB1D015B16C270BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 3eaed04f0428a08205b68c84d85d07388a44c04419b5d51f7556d138ee1ac584
MD5 979e57123193cde9138dea95fcf8e3d3
SHA1 179b74a381f47bb4fddf5099395395a8374cc5ae
SHA512 8a97598c66867251826d6fd347c0f40ae741b87d523ab8f9787596a7e92658b698b39a1badf113ee22bbc47d2a17e33ddb6b48060c9e0872eee95e1cbca625e0
SSDEEP 768:xF3PaJSUDTd+ZXff0eeX6+qTko0u229a4vsTnVyLR9T:xF3Pac0vVTVKa4SirT
TLSH
T10BF2BE71F8A19DB788E6D385B207724B5E791233C6C86F8099EDBB1D015B16C170BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 2c94ee9171bee6517723f301f2df918039d021fbf7aaf767b6dc1f698073552c
MD5 895a9d698624bfc1311a9ea55c73ec28
SHA1 24a2bb1f66df8dfe100bb88aca609c3034364d81
SHA512 eb291edd49c90ae6dd7c255b1f9bf33c3727bb6a4726eb4f13007c0d99c82c5c393215f1d6cebcb53bd93790cb2657b587af6492e72db4cfd77d47a7feb6a18e
SSDEEP 768:Rrv+4UNbdG3cseDTd+ZXff0beX6+qTko0u229a4vsSneVH1SdW:RbsbU3DdvVTVKa4hEH1h
TLSH
T1F503BE32E8689A738DE68685B107754B2E791263C6C80F90D8EDBF4D025F49C170F92B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 fa76638e29e8db5a22e2de641ae86859d3fad49f2eee4303ab6b1eba66f6f0f3
MD5 8488e21a6d0a3ebfc07ee307d20a2567
SHA1 295621c7bd977b949113f82f42e07c7c78a54bf7
SHA512 515706e22e6a03e8ccb337070897861bed04b3ceb2fa30cfe59101cbbf8b92191119ba254856c77a08ec70155e25d245e0d49bb3163c098128cb774208d07355
SSDEEP 768:2O3YaJ2NgDTd+ZXff0eeX6+qTko0u229a4vsTnVyLR9T:2O3Yao30vVTVKa4SirT
TLSH
T185F2BE71F8A1ADB788EAD685B207760B5E791233C6C85F4099EDBB1D015B16C170FC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 d7e09c0a385ed7980d1ebb1544595e2c096778fd9432b8fb0678919d83ade34c
MD5 19bf59de6f5a6ecbf3059d5f982cc199
SHA1 6e3461da0047c8d662313fed2afbaede2ad7efac
SHA512 ccaa5ef35390f86c9b210134319403f3a93c11f3fbe964d06a940650ef60df35d8b460c34dbb916b66eceafbb29e836fead674c58614d838ee1a895010689b3a
SSDEEP 768:prv+4UNbdG3r2VDTd+ZXfIeX6+qTko0u229a4vsDSeVH1SdW:pbsbU3BvvVTVKa4bEH1h
TLSH
T1A503CF32E8658A778DE78784710B75473EB92163C7C80B90D8EDAF4D425B5AC230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 20f9caa3e25ecd8e362de42980d2c421109ce01256217860963d49e6895f5af1
MD5 62c54f208a99a733bce587f75fe93a37
SHA1 ce1ee9b94b34be94cae9a8bca48b5bc2c45db3dd
SHA512 6e25687312d833d7b337924d480c3a2d255c8fbf136b5925c27449dd26f6540e46cf9daee76f2a84c53c92373172450a71b89f455221dfe4a65ae749e9c8df89
SSDEEP 768:JFQIz3Wwg7aJSkDTd+ZXff0TeX6+qTko0u229a4vsTnVyLR9T:IIz3WacZvVTVKa4SirT
TLSH
T19003AF72E891D97B8DF6CB85F60731078EB50273C6C8AF50AADDAA1D115B19C130FC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 bae6cc80a097641467aec8103025d8a46fc201b887e3a04652bc90947452c08f
MD5 155475e74db97b05e3a61374afe12531
SHA1 f80b540f9421f4ad09e0cb8f3436cbd6b8e1f691
SHA512 4954d5cd0793b90c6510f79f795c4d6fdea4be385e7dcbb6646364b791c0ea36c75f06cf561c0ae8a656820deb66f40989ae07b9695df78c9e022f39cb3db3b7
TLSH
T18BE00257DB1500BED46C477155D717613BF5D15006F71757696421A85CE33003E35ED4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e4f027d87587cdc55f1f853549b879428ff72acc4fa6350bc94778efb3f65df5
MD5 cfd86d84c9f689da6c93a40f527314a1
SHA1 3a24a1d93022680ce31c10e85f8e8cbc9e551635
SHA512 e01de1d0ab31bc70540de3d9e97cc3870aaab1b4a723deeae0860e1219a85b449ce577173b47ffb0a0fc8c78a92f1e72078cb1b052d578440b7b700ceaaa4d86
TLSH
T1DEE00906DB1400BED42C0B3491D323713BF5C15006B31757599011A82CA33012F36ED4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0b24e63c9449ae1aae8134aed8550418ebcebac4d433ef2aa1bb8a38d64d321d
MD5 93b9a190ca20f4d00f2dd20ea6790bac
SHA1 b8982a18feaefb99468d88c52e6fa8daa2197da4
SHA512 ea499930cfb628df03586f773e476344981e2ee37b641ad58364041af2cfa01fcb11c6c397461f940c581982c5be81698bef897ef6c1547e1461ef0e8aaad6bf
TLSH
T1DEE00917DB1500BED82C4B7591D327613BF6D1A006F71B576AA411A82CA33052E36ED4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2af70a10d030d964f758417d45bc6730ee7022a2e2b0a636ac6a8f653047e3dc
MD5 0e660b2da88276335545551bb5d1584d
SHA1 1c22663a3d7c3fdf9eeb08d4fe5f6ef8dd14b298
SHA512 93906ddac58dac6712922277b7b38db0dcdf74b44dfb5aa63dabbe1294300e62ef0c4b039276080c8fa8b9c948193c34c173507b086d6403662c939e4d01b3e6
TLSH
T181E04852DB04007AC86C073050D317203BF1C05002F20B832A6420A82CE33002E31EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 bd0f1a192e92e7cc1e374d331b8adb80c2a85eb022742d23f6b0fa135dc5482f
MD5 981bb67f47fc79e1dd35ac52199e6888
SHA1 6370ee3116e6fa2ee37e4009a33466ed9dc2e3c9
SHA512 eb78cbfe97c5bc3487c21ffb8d57fce87d2fb307ec97da3e0e8308c4b283a6a3970acf9c1f018e0c4a0b7d82a4d34d4420e41abb0761529a7d50dffaf84e5e80
TLSH
T167E04862DB0440BEC86C073550D31B212BF1C06002F24B832A7420AC1CE33003E31FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0f423f523bd397b9a3665036bc385a969e581032d7977e41894a5612ea559e0b
MD5 8205b31f79b8c6389e6852b03a721053
SHA1 c28d913e47165758297a4adff7c03927a6655dd9
SHA512 aca557fbf8ccbc7b1a9ebf7cefc5ba0a872e764248192bc0c11693e3a25c16231bb98dda1e5add29883cbeb9b6fb2010a3599d5a6f2c8cdcd0f81fddd57b2dc2
TLSH
T187E048A2EB0540BAC83C073650C70B212FF2D06202F64B936A7820AC2CA33403E32FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a0488e05090cab99523b5fb39ac8ba9956a6eadfc6410f30528903463d06346a
MD5 df184253591a3bdfb2befc6f1e222a69
SHA1 b8533e229778813acb61144eb960ea6c95175edf
SHA512 e729bbd4455e0d2708e764055223384ae07a79c25cebb7a6a85b92ff609f9fd83f67b56d499cdc3457d469bcb352ce18eff67f6e288e405e2391c01aa2cc41cd
TLSH
T1A4E00106D70000BAD4280B34118327612BF5C05006B32797552011D86C633002E26F94
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe594aab.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe594aab.TMP
Size 392B
SHA256 9da176819c711ec2b2eaae0687804f858b727465c4d33a33d720e5fadbb4c272
MD5 ff3b7e4dbe4ed16572a7ad3493c02612
SHA1 21be0c71eec9d18612c873962a4fe6243b5d70d2
SHA512 f359d6decfdfd8d8eeaae51bfdbfa3c6b6981dbbd39f4088b41c76c7d3c8cd68cec4c7bae5e1217f9fd06843cb4fbb5ebdc2b8bfa4ec4160983b54c88af1526a
TLSH
T11AE00407D30000FCD03C07301103377117F5C01004710755551011440C533003F37FC4
MD5 SHA1 SHA512 TLSH

Submit Download

f5ad7281-a782-4fdc-a9fa-4418f542df2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f5ad7281-a782-4fdc-a9fa-4418f542df2c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

ask.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2812_1960444087\CRX_INSTALL\ask.html
Size 370B
SHA256 5e4a8f6c4cd658ecf912aa6a55221ee09b5b0f4f466c3d7b233ccb5a5b1e3dd6
MD5 15be8e07263a96f363dda76a482ab087
SHA1 9e7c273cf001ffa190dd8d1fb56a657dc72e4c20
SHA512 d9ed86aa3b036990d8b46ea0d5a3cf94e171839a32ce4a96d7a8536f0e4672aff7d8e3ab3991abf69069e3a697abfeb3cac3d8db8678c96291ef38b11d9a926c
TLSH
T113E0DF4B8C95C91C10609853EC90B118889A6A4FB7A4AC8829EA813A4FD83C8895B9AC
MD5 SHA1 SHA512 TLSH

Submit Download