hxxps://demo-gcsocial-qpjt7y[.]eemployeurgcsocial[.]demo[.]ikaconseil[.]com/login-eemployeurgcsocial

Resubmissions

10/09/2026, 09:19

260910-lafmvatyey3

10/09/2026, 09:16

260910-k8fvtstycv3

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 09:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://demo-gcsocial-qpjt7y.eemployeurgcsocial.demo.ikaconseil.com/login-eemployeurgcsocial
Sample260910-k8fvtstycv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5164	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134335053917453056"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{5C3A5DF2-B69B-44D1-9410-22C441302B57}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
7736	msedge.exe
7736	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
660	Process not Found
660	Process not Found
660	Process not Found
660	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3492 wrote to memory of 3320	3492	msedge.exe	87
PID 3492 wrote to memory of 5164	3492	msedge.exe	89
PID 3492 wrote to memory of 5140	3492	msedge.exe	90
PID 3492 wrote to memory of 5140	3492	msedge.exe	90
PID 3492 wrote to memory of 5140	3492	msedge.exe	90
PID 3492 wrote to memory of 6008	3492	msedge.exe	91
PID 3492 wrote to memory of 6008	3492	msedge.exe	91
PID 3492 wrote to memory of 3704	3492	msedge.exe	93
PID 3492 wrote to memory of 5304	3492	msedge.exe	94
PID 3492 wrote to memory of 3704	3492	msedge.exe	93
PID 3492 wrote to memory of 3704	3492	msedge.exe	93
PID 3492 wrote to memory of 5304	3492	msedge.exe	94
PID 3492 wrote to memory of 5304	3492	msedge.exe	94
PID 3492 wrote to memory of 5864	3492	msedge.exe	96
PID 3492 wrote to memory of 5864	3492	msedge.exe	96
PID 3492 wrote to memory of 5864	3492	msedge.exe	96
PID 3492 wrote to memory of 4052	3492	msedge.exe	98
PID 3492 wrote to memory of 5436	3492	msedge.exe	99
PID 3492 wrote to memory of 4052	3492	msedge.exe	98
PID 3492 wrote to memory of 5436	3492	msedge.exe	99
PID 3492 wrote to memory of 5780	3492	msedge.exe	100
PID 3492 wrote to memory of 5780	3492	msedge.exe	100
PID 3492 wrote to memory of 5780	3492	msedge.exe	100
PID 3492 wrote to memory of 5804	3492	msedge.exe	102
PID 3492 wrote to memory of 3148	3492	msedge.exe	105
PID 3492 wrote to memory of 3148	3492	msedge.exe	105
PID 3492 wrote to memory of 416	3492	msedge.exe	106
PID 3492 wrote to memory of 416	3492	msedge.exe	106
PID 3492 wrote to memory of 416	3492	msedge.exe	106
PID 3492 wrote to memory of 4264	3492	msedge.exe	108
PID 3492 wrote to memory of 4264	3492	msedge.exe	108
PID 3492 wrote to memory of 4264	3492	msedge.exe	108
PID 3492 wrote to memory of 3756	3492	msedge.exe	109
PID 3492 wrote to memory of 3756	3492	msedge.exe	109
PID 3492 wrote to memory of 3756	3492	msedge.exe	109
PID 3492 wrote to memory of 5756	3492	msedge.exe	117
PID 3492 wrote to memory of 5756	3492	msedge.exe	117
PID 3492 wrote to memory of 5756	3492	msedge.exe	117
PID 3492 wrote to memory of 2240	3492	msedge.exe	119
PID 3492 wrote to memory of 4560	3492	msedge.exe	120
PID 3492 wrote to memory of 4556	3492	msedge.exe	121
PID 3492 wrote to memory of 64	3492	msedge.exe	122
PID 3492 wrote to memory of 64	3492	msedge.exe	122
PID 3492 wrote to memory of 64	3492	msedge.exe	122
PID 3492 wrote to memory of 2572	3492	msedge.exe	123
PID 3492 wrote to memory of 2572	3492	msedge.exe	123
PID 3492 wrote to memory of 2572	3492	msedge.exe	123
PID 3492 wrote to memory of 944	3492	msedge.exe	128
PID 3492 wrote to memory of 944	3492	msedge.exe	128
PID 3492 wrote to memory of 944	3492	msedge.exe	128
PID 3492 wrote to memory of 5016	3492	msedge.exe	129
PID 3492 wrote to memory of 5016	3492	msedge.exe	129
PID 3492 wrote to memory of 5016	3492	msedge.exe	129
PID 3492 wrote to memory of 4744	3492	msedge.exe	130
PID 3492 wrote to memory of 4744	3492	msedge.exe	130
PID 3492 wrote to memory of 4744	3492	msedge.exe	130
PID 3492 wrote to memory of 1020	3492	msedge.exe	131
PID 3492 wrote to memory of 1020	3492	msedge.exe	131
PID 3492 wrote to memory of 1020	3492	msedge.exe	131
PID 3492 wrote to memory of 744	3492	msedge.exe	132
PID 3492 wrote to memory of 744	3492	msedge.exe	132
PID 3492 wrote to memory of 744	3492	msedge.exe	132
PID 3492 wrote to memory of 5256	3492	msedge.exe	133
PID 3492 wrote to memory of 5256	3492	msedge.exe	133

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://demo-gcsocial-qpjt7y.eemployeurgcsocial.demo.ikaconseil.com/login-eemployeurgcsocial
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x28c,0x7ffb1fd0c188,0x7ffb1fd0c194,0x7ffb1fd0c1a0
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,13715170192655222429,18161698675482818141,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,8001533256966119015,10275709129296523670,262144 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=2444 /prefetch:2
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,13182300933681782764,18084892728726109751,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,17847673354614709563,7526065098884480545,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,14277098407183384181,16885321544875763864,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4916,i,16065190199279958257,1432929952776736234,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,3928895675220489935,13802516127539840833,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,5940849632065571329,8610315816944667992,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:8
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5560,i,14040688692775296927,17415800095045821065,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,1135848367621046654,3449846747392057499,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,1135848367621046654,3449846747392057499,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,745360143632264062,17000049968019588507,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6388,i,4922511267459566830,14126807323283446925,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:1
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5628,i,16772110019794220948,4909245293759221615,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6740,i,18420676447973315789,9257342803752356411,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:1
  2⤵
  PID:3756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=564,i,7661023591355695236,8698115183408060402,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,12715362801310729956,11256025344858312447,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:8
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,4609095440224315410,12950087413598792834,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:8
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7020,i,9309505491702839324,17468908320111173446,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6996,i,10397873200295844760,14215418006481726231,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:1
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7112,i,10515351053417835713,6303006443580027533,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:1
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=2148,i,9380036954100559132,13899234186401340178,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:1
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7180,i,6581633456849609865,8024926276446271423,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=7356 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7496,i,5267788882209232690,16347062788643271375,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=7508 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7348,i,14346490105914519906,4523939461436198386,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=7636 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7608,i,11133855004883220179,14901449985259843642,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=7788 /prefetch:1
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7920,i,8284953720769909355,13587064338289580363,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=7932 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8232,i,16838079081791167059,1340635931067287777,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=8228 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8356,i,14750337580801006026,3798411045717855121,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=8360 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8524,i,1470339752309643836,16668368343247192891,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=8488 /prefetch:1
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8560,i,4983092085816045686,11943172682977243281,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=8652 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8784,i,13153130560144771689,13227165423194331901,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=8792 /prefetch:1
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8808,i,15273865444217440179,2912688705989617087,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=8944 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=9080,i,15010260732610878186,16381235335669534442,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=9076 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=9096,i,15931469863145022973,8863817274044011292,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=9232 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9392,i,642500554931539221,18103831122973968359,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=9428 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9580,i,11011133296033519468,7399028499356449644,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=9592 /prefetch:1
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9744,i,7256639651416986446,535902208492784669,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=9756 /prefetch:1
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9872,i,8510509959347287315,1324863388015650607,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=9868 /prefetch:1
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=10188,i,17320073319374287404,4362599801565391990,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=9372 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=10324,i,17152943710901951598,3889380505219701566,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=10308 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=10508,i,14855873644892182900,8198506832440516655,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=10540 /prefetch:1
  2⤵
  PID:6160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=10672,i,5238468021487745387,17091891201999779320,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=10680 /prefetch:1
  2⤵
  PID:6172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10700,i,8160143835201304476,17384266757227327307,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=10844 /prefetch:8
  2⤵
  PID:6184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=10728,i,9250923239795010280,6060039624590050322,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=10868 /prefetch:1
  2⤵
  PID:6192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10748,i,17737480854527162430,102672271713374229,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=10916 /prefetch:1
  2⤵
  PID:6200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=11252,i,12410063593644232632,1615303851152903996,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=11260 /prefetch:1
  2⤵
  PID:6208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=11404,i,3372578999827015433,8692166600671970464,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=11408 /prefetch:1
  2⤵
  PID:6216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=11548,i,18405119429782174415,17815196627870955253,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=11552 /prefetch:1
  2⤵
  PID:6224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=10336,i,1346426147538895824,6619598296257625632,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=10904 /prefetch:1
  2⤵
  PID:6908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=11844,i,9079851854395364753,5798334477486641221,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=12204 /prefetch:1
  2⤵
  PID:7052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11896,i,297220532169425651,17653625598502093362,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=11384 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11860,i,12318253335716115902,12814062341353420808,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=11868 /prefetch:1
  2⤵
  PID:6380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=12456,i,8484090951840279567,17360144562572647905,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=12460 /prefetch:1
  2⤵
  PID:6688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=12560,i,17239025971605089873,2286457439820219681,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=12616 /prefetch:1
  2⤵
  PID:6860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=5880,i,15109591874996484409,10109997044283576313,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=12864 /prefetch:1
  2⤵
  PID:7028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=12940,i,4780147312534160171,2868561429214082222,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=12944 /prefetch:1
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=13152,i,13975502461688606341,12895087593399912245,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=13116 /prefetch:1
  2⤵
  PID:6920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=13156,i,12725233629943101765,13332376387981333203,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=13300 /prefetch:1
  2⤵
  PID:7216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=13424,i,9427849316834875924,1094203312922958571,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=13432 /prefetch:1
  2⤵
  PID:7224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=13560,i,7938028684104828162,17391834467134931924,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=13564 /prefetch:1
  2⤵
  PID:7232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=13184,i,18340649871159252089,1757858664925910297,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=13608 /prefetch:1
  2⤵
  PID:7408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=13888,i,14141729453391915076,4796694568219268849,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=13884 /prefetch:1
  2⤵
  PID:7416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=13792,i,2325156151601617151,207116631970252770,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=13552 /prefetch:1
  2⤵
  PID:7520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=13932,i,5269110392838777908,9515050914484330563,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=14184 /prefetch:1
  2⤵
  PID:7576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=14296,i,18070091291175285681,10000387466703446226,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=14292 /prefetch:1
  2⤵
  PID:7584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=14508,i,1017253892438609560,4834285816739878080,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=14512 /prefetch:1
  2⤵
  PID:7688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=14444,i,17790329432767809899,12357126048550290520,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=14624 /prefetch:1
  2⤵
  PID:7748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=14736,i,10618908109776108469,3450712548523762827,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=14092 /prefetch:1
  2⤵
  PID:7760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=9264,i,8042466681669578178,15179847511002429996,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=9244 /prefetch:1
  2⤵
  PID:7864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=14080,i,14845530134829386374,748807594907706012,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=14776 /prefetch:1
  2⤵
  PID:7924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=13896,i,16662034230542050696,8168924898439587118,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=14900 /prefetch:1
  2⤵
  PID:7932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=15068,i,12420013142512918341,6236812688397398537,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=14944 /prefetch:1
  2⤵
  PID:8044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=15196,i,3365382044301329116,3530587465437788654,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=14748 /prefetch:1
  2⤵
  PID:8052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=15208,i,17034483406133835562,16629910044805875618,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=9336 /prefetch:1
  2⤵
  PID:8156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=15460,i,1047673543985387899,17278742555794613669,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=15448 /prefetch:1
  2⤵
  PID:8164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=15772,i,9920090892862485099,15194721904194995161,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=15664,i,13021013959920943920,8899700694394298879,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=15476 /prefetch:1
  2⤵
  PID:8212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=15944,i,11056413232905247477,3712530960526064262,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=15348 /prefetch:1
  2⤵
  PID:8284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=15836,i,12069745374955281824,11456515860598003683,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=15308 /prefetch:1
  2⤵
  PID:8428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=16188,i,15323640772333358868,15158375243437920355,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=15952 /prefetch:1
  2⤵
  PID:8500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=16320,i,16724251189962220053,8100131525172395006,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=16312 /prefetch:1
  2⤵
  PID:8560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=15180,i,16504481994209796623,12547627882811855736,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=15756 /prefetch:1
  2⤵
  PID:8660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=16688,i,17512293753545456493,2506194825153207100,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=16696 /prefetch:1
  2⤵
  PID:8832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=16860,i,5221087796612733376,12609170225375660165,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=16828 /prefetch:1
  2⤵
  PID:8920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=17012,i,10610271071702582904,4054346393339725423,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=16872 /prefetch:1
  2⤵
  PID:9008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=17176,i,7581838216440481438,2825624559948466108,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=17128 /prefetch:1
  2⤵
  PID:9068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=17192,i,14313840184429217804,17414854570917122640,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=17324 /prefetch:1
  2⤵
  PID:9108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=17368,i,5883590419741501466,9062160518051321181,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=17452 /prefetch:1
  2⤵
  PID:9116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=18348,i,7740669420707545585,2015583976392348624,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=18360 /prefetch:1
  2⤵
  PID:8392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=18544,i,14902013534493699812,12053347889238952119,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=18516 /prefetch:1
  2⤵
  PID:8632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=18664,i,14792173669442451732,1144354637703555811,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=18680 /prefetch:1
  2⤵
  PID:8640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=18860,i,7119699682591950280,16882241940405147754,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=18840 /prefetch:1
  2⤵
  PID:8816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=18660,i,3626881607055834529,13751904123217710611,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=18876 /prefetch:1
  2⤵
  PID:8892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=19168,i,14478621139970377733,2887956567672692545,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=19204 /prefetch:1
  2⤵
  PID:9228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=19344,i,2942196971791945565,5900794968570771784,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=19384 /prefetch:1
  2⤵
  PID:9284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=19176,i,8156582797563190992,9713389008429282376,524288 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=19168 /prefetch:8
  2⤵
  PID:9412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=19140,i,12230735924541616722,535983329739068539,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=18228 /prefetch:1
  2⤵
  PID:9568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=14092,i,7888763134013137798,10785552324136906544,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=14792,i,2046414508439609529,11793500491199953833,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=18012 /prefetch:1
  2⤵
  PID:6260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=15372,i,12333566711205027707,12224233219930682690,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=15472 /prefetch:1
  2⤵
  PID:7352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=14936,i,15694585931261955968,7601003181565103669,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=18724 /prefetch:1
  2⤵
  PID:7452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=13184,i,17749846135035232456,3148295836707715826,262144 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:7736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=5528,i,8843929476780178115,10034627409251826907,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:8240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=13796,i,12567130393457138872,14097523898681639955,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=14024 /prefetch:1
  2⤵
  PID:8268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=5252,i,18141948628235712645,17920417423894552241,2097152 --field-trial-handle=2452,i,9792192295946178533,10021650917732327014,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:8996

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4904

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 2c6a2dc5a4dce1857e82224ddfb837a73236142b8be1888ba0b98a17332f023a
MD5 85b1e96622b66d6c187d403bf76a0c99
SHA1 b9ea7f0f31b980ea338c8d8e3bebc06d68604b6f
SHA512 dfce75a497588248552a3f856585b7201f246bfcbb0caf4d4501befeb3297075a34592926785b787913f89cadf6e0b6da9e90eb6e063ebe06f424cc059798897
TLSH
T17BE02BB9DC21FC3718FD0B59A05D4B56E70117173650495F3A3C920D8FB0A3B55D585C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000088

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
Size 33KB
SHA256 539628bdc4f3b107aeb78713c741ab9b5f4737532233506d8f1b1fdc4c81040c
MD5 a06c8f49a760752dc8b3ee4f217bf4fe
SHA1 2c159af5b7341c03cbce67afffafbbae2cbb7787
SHA512 af3b5c625bf4c83616c3ae1e2380df3bd35119998ca75cb96cd590c18b9227d18a03a50cf22880ddf41edd99ac7b8b9918c93a7be90d4dd3a8e6602c8e2b519c
SSDEEP 768:f+QHjwElyDV21n98SlMi1MEOV1IyItHdLqO:GOwKyD01n9RlfyTVJYRqO
TLSH
T1F7E2F15B2127014BED8CA143576EFB4FA9E374AC5609A24F547BE0AA7B8938754BD0C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 96KB
SHA256 00b42308115826481315f6a815745f8d445a89d855fa587f627b7b4388810023
MD5 89341da90f4120b2461a9bafeef01775
SHA1 90e281f4ff94fc0eaee2e876234884e16f69894d
SHA512 bb3e8fd234ec764c6450622ff2d5f2e6e777cac6006fa23b9c3e986d79b89911b9a57ebca3bb3f3e15b8437d0b305634eea968e7d8808188efca4840bf4d5112
SSDEEP 3072:OFM4gnEp7667akyq8ez5pqVo0cvK4Dhq/8fQVT:8cIwdq87ouczQR
TLSH
T1F8A312DE415A5AD9711B87D540A18F2E140288FDAE3AC206E3C7493E1D7E1BED2392DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 408KB
SHA256 7a50cff2ba27964e1dc892708f201b97f5513ecfedfc4e7e82ecf6c1246f6132
MD5 42af94577490c2f5dc901ea2d3e2e4a3
SHA1 8c93675968611faf7d148c12c1b2170c22075770
SHA512 273d37acb003a2626c57183301d729164bc310d682f159493c63f51f56ce1424e8367db630cfffdf452451011996a79e492c8f78c0ebe75765e1b1f3a94e5515
SSDEEP 6144:CCPRy65+Rj00vSwG8VeWXC8WSMLJI4U1HWUDjfK7PROSLw10UXiA7fg1wfN4kZiQ:LxUAa1d7MLHpU/MQCwqUXiA7LekM5ZY
TLSH
T1C39423D0B157AE489DD980FC00E12ED0CD16D2AD6A077FB61490FA9ED5AE7AD0C891CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 72KB
SHA256 fc886667b90ffad1b0229b102c340d9c93c8250aee944f4df3f35d8833811b04
MD5 2a55cd14779a918e614e873501c38d05
SHA1 4a59f4c5582092271e6c87e69d06d092d722fb44
SHA512 8c3523bb283d22d6ac7e65811cb0e17eaf879368210c26a20fd553204df2e06cb9cf58d4c19fe3b1dead430907fd186d87bb9c9a7afb09fd389d69cc9b39fecc
SSDEEP 1536:kNS2AXW7axoDItayH1pEPAfFzELcpceTwoX0eskqoMf0PHKi7+XF:JWktnHwAfJEL4ceTV0c1HKG+1
TLSH
T159730227B008563A93A0C78C371A48359FFAA0FA1B1452BFF1DB50DBBFE450635589DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 68KB
SHA256 fc70b88dddb2da85326b7ff7e1fa801f0099e5c0d3a85863afd2737af9b199a2
MD5 cb3d1e69fbf9c94b15e92f2fa26892f0
SHA1 b8e5aff1547d49a1285e2e0c4cb43dcd9993f468
SHA512 0f890af69b223aaec8bbc753bbc626f6cf0e0660182e38871a03337f1eec7be6b47cb9d5034a3cb8c226feb6cd964d396f56fecf07257f3cbc13de642c175ac2
SSDEEP 1536:1RrPSv8UR94fNhLVxko8PojNVcL7tk9/yGeJ3GI:PPZGefNhLVxko8MrcL7fJWI
TLSH
T16E63026A7FAAA437FB2C87016FF23034D1F8FD579034042826515BB5A4578E92326F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000090

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 43KB
SHA256 14ef713f8c26bb48eb58aee7291d24bfec7fe04461af055f0c9ad63a298c5a93
MD5 e7f31b312430a58beebf02569971cecc
SHA1 6a36445d1f2bd9ded564f13fb047b896f1ada7db
SHA512 f069e3981fc381c27bb2f3c1a36251142fce8661d614f92058b9418def9a950323957fc9df7453bb671b7639869542656cce9df96e0b45e6e12a6637ebc6e1d8
SSDEEP 768:3CZ1Qapm3DP4Q8Ag1BGBa0p/PE+4dxquLkDOBFwQ4aUjnlxGR/Yy:SZ6a43DP4RbGBa0VPE+pWkDOBFwQAjne
TLSH
T154130200E0F0CE82941B5C8A0D78948A7B210AD49EB5737486E8DFF7C51BDB8C6DB05B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
Size 64KB
SHA256 49c44a97498af5cdc2abaa89ab61f43895326914e942068e4bcdd946627ea065
MD5 54c07aff64efbfa7cc409c2c39beee1f
SHA1 484508546a33fc90e6b97f6240601ecc135c362e
SHA512 39c0bbe4cddd7eb1b17c6690b580a650640a1aed61ab004092af6cc870286c13dbdd59df763b724b7b022d6d071a18f02cfa751710d38954eaa1eada5b9a1abb
SSDEEP 1536:xB3Y4uo7hjiARYSjFTG/EMsLZ+XvOqRTCQCQF:LAo7hjiGY2FTUEHZpqlCJY
TLSH
T16D530254E3EBCBC3CA9E0A554485D8309A87A8F287851EDFDA3CF4C74697E1C4E27509
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00010a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010a
Size 21KB
SHA256 b7582acf1f182c6a66e203cd6eee889d409cd05ff4950975128a32fc3e0c0418
MD5 e126007f6b835ef3a0916864cf476699
SHA1 04eb8318f173d6fdb5417e92645502d93966b8a8
SHA512 5e169a71116c41508283ee7224b7fee51c6b737a909c269e062e7494c9e7a853dbd4a762ddd9d9f104d79965d5570c2511df5b1c08c840c2037a4901af8a7140
SSDEEP 384:7zhykQ67ifiZgQPmqN64Q4PBZtjCiMEZiRkCYzMNFMvj686avLDo1bo0/GZl:5VQ6kU5Pmqk4xZTF2Ct6YLDkpql
TLSH
T1EEA2C01F966DC059082EB5CC9795B522D0CB8391E5CD106FD8F54C2FB4B277236E8B86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000128

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000128
Size 344KB
SHA256 c1ba7027e790c346842569dc60319a75bb54ad9875b3a114cd3d60febdc1ecb0
MD5 a76556d1143eac7869c5cdd2ba75aee7
SHA1 62ace25f7a400460ef1550bd536b8006aff57655
SHA512 b6763ac3d83198054c3e24685aab797d60c39df22f0eeed2ff4217bbfb891efa1f2ffda857b079443e0ee66fa3e0b2f1cca34867fcdd8a709b88abbd93c33e4f
SSDEEP 6144:+1/dG8Lx2NjYH/1z2cvc5NFLhVke64uBSCGJ0qHQzr+LZ:+voj2hrvcdnlJWF8HQzrQZ
TLSH
T13F74231F614B6C6CECDE01C7216E44D5D32B8F52CB231ACBE649D16B04E749C8ED9A2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 21be6ab544a8535a88167b31af46948da328702191400f11b59d06d1c96c71c8
MD5 76e79459fc72152c58e8fac7bc9c1f72
SHA1 9658ce4930ffe4c72db0c2b88cf824dbba4892b5
SHA512 4539f6b3c853b6c936f1c490f25846d7cb49ddf1b65ef77406dc8310270fa4bf768d452f83bf6bcb0c56af36e4289609793b4cdf35c2d136c8633ba0a9349369
SSDEEP 192:PqqNcIY1qP7d7f6U7tgc4Kxkhh1MdDi6IN:PSIY1yd+zcrx+h1Ms6E
TLSH
T19822A3B010C925E0EBAB0EB36DE11A1F36B355D6FAC76E478580DDBAEDB7390125402C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe598469.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598469.TMP
Size 3KB
SHA256 4aa30c3cd7e5fc1036d7cf0c0317e1b3b792bd43a1c48050c2a3d145abdd90c2
MD5 eaba0173312ae2623332a3e514009e91
SHA1 79a1dd84a488ecfd09f209d71878d34b3a16a036
SHA512 b86df64a44acb63fbb24d63015ea4b9085598fe2ddd5b79d8d67202bda8c807dbbf31a053c429e22dadb66aff3272174d317a1fd20e26f8c3dfd253b1bb152f8
TLSH
T151715C3908DD04E2E7C80D72BDD41D1533B3AAD9FB03AE99E25004B76DF67118A0587C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 35KB
SHA256 4d19bab70ab4daedb3304c7d170b9b3894652c89cac4712b3a033643de57ff4d
MD5 112bfe1de825f44ea31f4f9d7f7158a9
SHA1 cec4c126f253555f8169b35f4640d0126beb318e
SHA512 430cfe1ace6b137f97bc29f623ec55f96da29512686b59995c613f6a116bc8a527ff05ed8c2d1777399862280ac172ecabcfe56e9efd4721eade47ad25a26b38
SSDEEP 384:D1tUPPjsJV+xnxRxNxgxXxmxjexjxUx6Jx3xfx0xrxMxKexEx1xgaaiGVy/4HIP6:dvxOdzn/vWsGqGCrZncp
TLSH
T1D6F25BF783A88A6FCE1252F0DE182F1ACE1C1874537C3C1985E95E07A7E6471D28696F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 235ce8f2ee2520823e8eb61438b1008173c0cdc917df19e92cb74f9508ac92dd
MD5 a9eb6a7902394b7f644197b51cae9b44
SHA1 27e0b55f3db08dce3a7a46259dd17df730142602
SHA512 c209d018faf24877bc69abd72d6ec4cb0096abd65887291c8d12f2869bdd43e70618db39cd58807e3381e5e70a3980e924fc4582ad2bee19d8272d924ea99ec9
TLSH
T17CD02263360131B8E9DD3FA2D1BBFC8EC72650E04943DDE420E058A8193686C09BB085
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 a108be4129127d395f01e871c11e2034c20b80a36d6a92f5a26e6b793d483212
MD5 74f0a0a817f3226e1b94f9088fc82bdd
SHA1 5e1c445b0b8ba961b2591526eeb7ff4a1271181d
SHA512 9b3503e7be5a7feb7ae35c215f59c54bbfab2f222e96cb35d8c407d91697834810568f8706feddb0f038715e1fffab735fe861bdf37d9bac118595deb25e7ddf
TLSH
T13CD0236329013178E5DD3F915176FC4EC73610E44942DDE420D05459153185D0537085
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 ba7d95901ba706731c921df36a1323d813ce58f42390e65f753836f54a9b541f
MD5 37f328e6cb4cfd90cc95b13970272606
SHA1 1b2ba566ecbcc2166a50502d2b15e832d473a08e
SHA512 090d8a62312be1020667dc164728ffc618b25e585a873b30d931cb1dedffa2fb815da836e5b67fdf0faa76cb1688cec8c1d3382f7b1e0c02d31318af0c52f4a7
TLSH
T127D02353260071B4D5DD3FE551B6FC4EC72600E44542DDD520D05468153645D0927541
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 7197e5179683457fd0ca16a76d82cfc92af191f325eae36732e8a826760b70ea
MD5 6f8a50b92c3e9bbb9fc3f13a5fbab79d
SHA1 bc621dc7f839bfa71a80c7c768399a16abab166e
SHA512 6eef03a5575582b487ddd35f0afb9d6714c5d6328383b631fd5c2eea4c736c6a78996a9cc22ab1b38232e25aeae7a4d915d0e311426e0aa778faf81794c92aa4
TLSH
T162D022633A0031B8E9DE3F9192BBFD8EC72610E44942DEF520E0989C093686C093B08A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 ffd00f3c0ffb8bc45f8ba8b7965c5eef961a5c7ecffd426f260714b3b36bc4f3
MD5 574c46c3c41302f643efc22769dab7e7
SHA1 3eb3e0e8dd991316aec35ad890116ec844c29a99
SHA512 ec38a2ef3af783e907a90c162dc1a92983885522608721a3a44c9390b584ee29850cd5fdd56d63f613d914baf8d2f46c2824f246e4ea73bf1911c4b5b226389c
SSDEEP 384:sxZaTsmzh/fsssZAazOGHbwt/PH9jy//V5e:sCwmzh/fMZAaz5HbUPHUPe
TLSH
T1B282F95666249977CDCBCA19F965BF53D3F9406399914E8869FCCA0C00EB6FC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 21KB
SHA256 34155806a3252c19f5109969daa4ab667ce6fafdc6dd1e7160127d10ade5c5c6
MD5 321b213c70ad80bee387612588db0e4d
SHA1 fb0c6d03ca2274a17ea1b1bbfb7afb4b8fe3ea0a
SHA512 47a914cc3d365e97b2c28b0314f096bd6300cb960375b4637bba36748d509162c012365ceabc26318d6c84ddcd56a924cc31b37cb99a688a32bdb877644f7033
SSDEEP 384:sxZaTqCmzh/fsskwzZ8+f7Hbebg3jH9Pk0/5e:sCuCmzh/fEwzZRDHbtjH/e
TLSH
T1E2A2D796A534C9778CD78A19BE74BF92D6E94063CD505D8C69FCCA0C04DABFC260781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3ed28410c95bcdd49b775e999633ec95a9fd79e43121075d441a0e078c22041
MD5 f69e750b13c549c16996bde771106f07
SHA1 f3ce7bce220e59cf4ead817ef6423038f0d78324
SHA512 f942c9f08562a4828ba0e5eddd4688fc3995511e90fac2e939ef5f22ba5105f580b294d4c4e56e3adef92b0304627a7501a96a18e13b795a929ffee8b420600b
SSDEEP 768:ZYsv8Od/hWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVA0LlEe9NsQroIRLO:eY8Od/hWvFvmXu1ja10Lm2NuIq
TLSH
T19BD20B3B680CCB7E4F840D9DEC2A6F966DD801CB66984D5447FA884C03C77EB521B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cdf12dee-6673-4e91-954c-23b338c514e6\index-dir\the-real-index
Size 3KB
SHA256 9faabaee114bb07b06b2e5439ceb4a2a3ad46c87231cd38c4ff5876ebd97e2fc
MD5 7920590cdf2702d5f61a3ebcaf93e773
SHA1 91b364a36f994cabaa37486d42426a9eeb81f435
SHA512 ac2aa9570cbf2989171dbbcbe1498579616b035d39ce1c6515614182c0f656dd159fe61cbc04209e331fc9970be4869ed247110985f2213fd34b28e15c20354a
TLSH
T1BB51DA4E4D474FAEDDA8167614B5045533386ACC1378590B56FED138FCC3B185C89AB5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 15fd6165876912dd36bab536fd42731fcd9cf11a05915bc819629bc646eb50bd
MD5 1a0a9014331c1eced5cb24944da726b2
SHA1 d91bca30959a3d5bb9e9118ff6dd552d1313ea77
SHA512 a76d15b30b825ea51030b9bd041251678e15165509726e176e7a60e1ec3bc788fa8cc20710372de50d465ffdb3572e1a0f2882a6d565fe1b8424443b552e615b
TLSH
T17CE068F37FFB1850FC6BA3C6213058A10006755098409D0F2816A28325B1329201ACA6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 9c0de5fd84deb3e8bcfc360e870c09738930a4e74f402e0607a016d272843a87
MD5 99d14f9afef7d57e332e90a936717991
SHA1 ed31119279b2e7d78152d2ba2e5c5d4a08c64c9b
SHA512 e689222191201b20f5deb0899c8947a34376cb92578de43a6e334c1db6c4f5ec5087c3d2d51cb0a7bdd4c951e9de8c6cb4b5ebbeb2c6bbf5078094d5f31c4ae3
TLSH
T1ADA0025599E7804AC001437491A50AC8A210A89D06553311C0EDF254CC6A2848192448
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 a1feb3baab0eb93777396fd2e94b6996a401b52c5f0beb76a482350b6acac206
MD5 8689a342a55b414489526bff15ceeac7
SHA1 e4a879952fa884805d4d4124e844a0b0d584b1d4
SHA512 bda67d8ab600b48698c2cc1ab5004efbafc7881f00a0288d83de37557b59a38c4b3b502748881b6cf997c49de44f388058e88513e16da9fffad00f22bf9ab11a
TLSH
T141A00235D3504042D0634676A48513882310D9214D454357CEE45458CC551914E47051
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 1d19e216279ef9754bda47e751c9febb2bb1b353b26a2afbae309c6a5295c412
MD5 53a89b144586b9b3466269aeb0685f10
SHA1 a86d07214863f977b2c99e6b3119f514ef892b6e
SHA512 c61ae6f06dcdb156d2eb79f105b3cd7a5a390ad65447bf858638591f781a62aff1e4ef546aa329311d55c95d4bc8fd6bd0737191a8d9597a607cb0c4c2f3f748
SSDEEP 192:05ppxnY753RNBvRJJdt7p5J9xxNbQ10AuH:0LppY93PBZJPtN53xvbQ10AuH
TLSH
T114B27A5A713A0211397E3988B39696364F4235A37058E4BF7FB814A14F27E225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 1b004ebb94fb5870f967029a53fdd7140ee79dc0b162d9df0465e9a502e513d6
MD5 3974c4a82002cdee4c148693e5bce2bf
SHA1 6954ede26787299a65e375b53fd9aa63900568ef
SHA512 716501ac3e4d6a5f15789e7b6d73a1f541862c168efbf4f49e63694cd4cc70e5c8baba81c0e9e108bcd7f73ee1dc1513c8e2628ee48f161c180e5fa6a91f8372
SSDEEP 384:n5iFiZcI63sNH8TUNTUlI4yTJckCrqdXipv4fmGCtFh+qL6OKip0+jIE7esa+VYG:QFQ63iwgYkFcbGCtD+qEip0MIKehg2Pc
TLSH
T15EC23A72E8A4D9BBEDE78BC5A74A7A07DEF4815385CC99D4CAD95D0D01872AC030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 eea9a6670e0ebc63d312f29c618a9e92ec55f094d8745e3848d566994aec0fd3
MD5 ae9cfc86f9b7729bef1db9c13bfd5976
SHA1 11ac85a068cedad03d4d88aa3aba0a2fbd56da22
SHA512 6b821962006304626c52010f70b492760abd5f0f9eef69aa810d8981bf58e5adb64aaf835dde119c0f11d0df262aa3e49ac6a7499b0db86ad112e7bef620d97a
SSDEEP 768:pAFQ63iwgYki/obGCtD+qEip0MIKehg2Pc:T63JwtD+qEiO3hg2Pc
TLSH
T15FC24A72E8A4DABBEDE78BC5A74A3A03DEF4415385CC99D4CAD95D0D00872AC030BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 409165f8ab3ac2e727e4f5bf8e973ef624d9b9a096b0a5f4d0c70f1f771390f3
MD5 3cea77f47704dbf92f1075c1c536cabb
SHA1 cb171e8ce3a2a35a376d0ac6fd2d399c22c69589
SHA512 4fabf2eceb78cd919030bce98a8428550eca4d8fcd06d883fdbcefb9c23f5353a423f5d0e62ed0652d84055244586ef9df74c5cc27a73cecadacbe149250b074
SSDEEP 768:p1Fccps3ywgbkUWhbGCtD+qEip0MnKeI8p0TLY:rs3UCtD+qEiOOI8p0TLY
TLSH
T1AAC24B32E858CD7BEDE34B99A75B3A07DEE4926385CC99E4DADC1D0D01971AC430BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 f33ee524aaf21eba16fcd09ff53bbf713a928767010a73b12e320029d24b6455
MD5 33a005b33eb8d98e1f70c8d24807ba37
SHA1 72f5b82c79df49e86d0d082839db06885d333881
SHA512 712373b6fff6b7bef203573144ff7a5d9ec541ec89f8e669d492ad40251d5bfc8946c33f0de526fd24c4411127be99cfcc07df56062b564f965ceb0331a10f5c
SSDEEP 384:nkiFiZcIc3sNH8TUNTUlI4yTJckCrqwXipv4fmGCtFh+qL6OKip0+j3E7esa+VYG:/FQc3iwgYkYcbGCtD+qEip0M3Kehg2Pc
TLSH
T1F5E2B4F198D78977E8AE4B87A73E2D029EBCC153B5889994B7D81D0CCC861BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 a319908c34774a23263a39df1d54000b53ffa1d281123086021a666bbe6fb3f7
MD5 3cc8167f6cb1422ad8fca3e6cca8591d
SHA1 1702249bdccb8911c078da66be6e00fc75025a2f
SHA512 43f3548139b1bd81a1c83bb09ffa5b2f62a52d938e70e845c5084d7b905da8026f60623efd36c4ef32307d5a9d38b4817a9a4211c8371845fa5f7e82d98b8b0b
SSDEEP 768:pcFccps3ywgbkUxkbGCtD+qEidCI8p0TLY:Ks3UQtD+qEigI8p0TLY
TLSH
T188B24B36EC69D9BBEDE34F89A75A3A07DEE4526785D899E4CED85D0D00831AC030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 cb5df3192eb594aae03b795082bb124a4a54051db2505faf2206a4190ec6720a
MD5 169a364eae27c32ac6d0d86294b16700
SHA1 20b30a6b0aa7f32a2c8cca4adf7efe3f7840df33
SHA512 75f892c2d2530605721fb9bc8624342fb4ff09322a41eebb3df9b33dacbc0d707634bc95bc332cbbb1b9ac05ed32a3f55b50f26875d30a6cc5e382c2c40fcdf0
TLSH
T171E00186D30010ADC478077140872B362BE6C06006B2435A5E600AA83D273406FB0BD4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4ee5c3fc0f077d1ef3a229644b47ccac8401c6663cc42a4e80169753ff349ea4
MD5 ffcbccee371067576d9139b71229db12
SHA1 48586e4617c5ea84fcbcd735df71d7d67f99a9fa
SHA512 b9032b38fa6f978ecde69a2830202fee8deaf433a9f4ea8117485d49ff792093b6de9db49884407442d1792376df590af22e731c95375a44338f075b56c32b8e
TLSH
T11DE00445D300107DC43403310043133313D5C03005714347540007503D033405FF0FC4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d14606fb7fbdf36343d03083fb038c1e02c6244f735136693c061ea17ea153f2
MD5 077cb2d1b3304354657169809deef836
SHA1 3808c170d768d1b85f00b84877f502042ef53647
SHA512 4fa13427b072d3b9a4c91703f0239911a3c66a168b259f96e41efcbe2020c38c76b9bef5e68cabf36b32573e0fa4b18d3a9da61db1ddbbf9d51945122742bc8d
TLSH
T140E00986970010FEC47C0771409B2B362BE6C0A006F2435A5A600AA82D673506FB0FD4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 34df8ff6d7203e8a6141863f13e3db0db60bbc146ab79885465a8ae4b5591245
MD5 995295a8e0019d3ff63bfad7ca832558
SHA1 8196ef626f45e5b7098410ab4e66a1c6ca870378
SHA512 8d0a7faeb01a94cbaf1fba4afa992941a83b6ac23ee9f0cb8c980e18f8c5939765bda9062abb5e36e1fc287158ad3ac90c56860962a52721b21baa5b2ec916b7
TLSH
T154E00246D30010EDC4380331408727362BE7C07006B2435B5D2006B83D233407FB0BD4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 294b074ebd98f7290893a747a897eacfc8ba861974d99fc5181272eba1e3948b
MD5 49c55e6277e8d3df3dace5cf4e3ebfec
SHA1 e6240c93da8d51a665002d5bda6fc0c61677098c
SHA512 4265ec5c2d6755fdc42124a5a613269614ec5fd2ee9fa3aacb43d89be865bfa475de78d2ca48af15c7cde5470b885142452c1889b3ebedd1c8b70efd4c472be0
TLSH
T12CE00246D30010E8C82403314047232617D7C0300571435B5C1006943D132406EA0794
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 cc8d2271f1aac50b61c2eae8ee2ccf1d94705216b3b6260cffc8ea96a05444ec
MD5 bbc849e2992595e6206e2dbd8fea3830
SHA1 72f113ff6e58082d67bd421b36278b61bd30640f
SHA512 7194e871a459afec1a9b5945ba832594866c1de7f0f8912b56c35ccbe354677305f55df120afeabe0a31da672fd3b148d4ebd75a81381578c7fd70a93efa6a43
TLSH
T1EEE00986970010AEC468077140972B362BE6C0A006B2435A5E600AA82D673506FB0BD4
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5878c5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5878c5.TMP
Size 392B
SHA256 cdf0f012a7f6ce9748f0af03179e3af6dc12739d90f7909198fdad7f80a361f6
MD5 0858a37cf97e263f939d5e8bc30b7a16
SHA1 07f5bd904b5f1fe58fa3905ab81c5a61a05252fc
SHA512 02debe1c17d639de45fc580bb5a3a392676cf9aa0f0e53b9be9da9a8478731ea59de6a998b719639ebebbe716481b9789279259242e9c3d6649a11ac9a661c93
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0231a0d91f39ac9f1be78508024a3aa7168a0cf12739330e8166da475b7781a4
MD5 7e466ab3e35ab5d5ec33a4c12a250733
SHA1 4a91d35e05836e65e263f25af6a99ccad544d50d
SHA512 ff36c64a5083ce44971a4dda12070d2fe9a7679dbd1faef1272a673824599143a38de85716b95cef00ff2ae211950e1765438d603a1fc0428f6fae2c085c4c3e
TLSH
T1F041F85CA6F91144B3B77E56ABF6A86D887A7D372E06945E00010E4F0A73F01C862B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download