hxxps://biblioreads[.]digital/?id=13405625

Analysis

user interaction
yes
max time kernel
359s
max time network
365s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 19:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://biblioreads.digital/?id=13405625
Sample260930-xtd4xaxy2p

Score

5^/10

discovery

Malware Config

Signatures

Probable phishing domain 1 TTPs 1 IoCs

Phishing

T1566

description	flow	ioc	stream
HTTP URL	70	https://topnox-inpus.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a435848ebba36524	5

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3772	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{4BF56EE1-464E-4E31-BDF7-1A58F5104445}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
8040	msedge.exe
8040	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
648	Process not Found
648	Process not Found
648	Process not Found
648	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe
4620	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4620 wrote to memory of 1476	4620	msedge.exe	85
PID 4620 wrote to memory of 3772	4620	msedge.exe	86
PID 4620 wrote to memory of 4048	4620	msedge.exe	87
PID 4620 wrote to memory of 4048	4620	msedge.exe	87
PID 4620 wrote to memory of 4048	4620	msedge.exe	87
PID 4620 wrote to memory of 4136	4620	msedge.exe	88
PID 4620 wrote to memory of 4136	4620	msedge.exe	88
PID 4620 wrote to memory of 2556	4620	msedge.exe	89
PID 4620 wrote to memory of 2556	4620	msedge.exe	89
PID 4620 wrote to memory of 2556	4620	msedge.exe	89
PID 4620 wrote to memory of 3208	4620	msedge.exe	90
PID 4620 wrote to memory of 3208	4620	msedge.exe	90
PID 4620 wrote to memory of 3208	4620	msedge.exe	90
PID 4620 wrote to memory of 4412	4620	msedge.exe	92
PID 4620 wrote to memory of 1428	4620	msedge.exe	93
PID 4620 wrote to memory of 4412	4620	msedge.exe	92
PID 4620 wrote to memory of 4412	4620	msedge.exe	92
PID 4620 wrote to memory of 1428	4620	msedge.exe	93
PID 4620 wrote to memory of 1428	4620	msedge.exe	93
PID 4620 wrote to memory of 3496	4620	msedge.exe	98
PID 4620 wrote to memory of 3496	4620	msedge.exe	98
PID 4620 wrote to memory of 2000	4620	msedge.exe	97
PID 4620 wrote to memory of 2000	4620	msedge.exe	97
PID 4620 wrote to memory of 4452	4620	msedge.exe	101
PID 4620 wrote to memory of 312	4620	msedge.exe	105
PID 4620 wrote to memory of 312	4620	msedge.exe	105
PID 4620 wrote to memory of 312	4620	msedge.exe	105
PID 4620 wrote to memory of 3800	4620	msedge.exe	107
PID 4620 wrote to memory of 3800	4620	msedge.exe	107
PID 4620 wrote to memory of 3800	4620	msedge.exe	107
PID 4620 wrote to memory of 3292	4620	msedge.exe	109
PID 4620 wrote to memory of 3292	4620	msedge.exe	109
PID 4620 wrote to memory of 3292	4620	msedge.exe	109
PID 4620 wrote to memory of 3520	4620	msedge.exe	110
PID 4620 wrote to memory of 3520	4620	msedge.exe	110
PID 4620 wrote to memory of 3520	4620	msedge.exe	110
PID 4620 wrote to memory of 2764	4620	msedge.exe	114
PID 4620 wrote to memory of 2764	4620	msedge.exe	114
PID 4620 wrote to memory of 2764	4620	msedge.exe	114
PID 4620 wrote to memory of 5432	4620	msedge.exe	121
PID 4620 wrote to memory of 5440	4620	msedge.exe	122
PID 4620 wrote to memory of 5448	4620	msedge.exe	123
PID 4620 wrote to memory of 4364	4620	msedge.exe	131
PID 4620 wrote to memory of 4364	4620	msedge.exe	131
PID 4620 wrote to memory of 4364	4620	msedge.exe	131
PID 4620 wrote to memory of 796	4620	msedge.exe	132
PID 4620 wrote to memory of 796	4620	msedge.exe	132
PID 4620 wrote to memory of 796	4620	msedge.exe	132
PID 4620 wrote to memory of 5520	4620	msedge.exe	133
PID 4620 wrote to memory of 5520	4620	msedge.exe	133
PID 4620 wrote to memory of 5520	4620	msedge.exe	133
PID 4620 wrote to memory of 5508	4620	msedge.exe	134
PID 4620 wrote to memory of 5508	4620	msedge.exe	134
PID 4620 wrote to memory of 5508	4620	msedge.exe	134
PID 4620 wrote to memory of 5396	4620	msedge.exe	135
PID 4620 wrote to memory of 5396	4620	msedge.exe	135
PID 4620 wrote to memory of 5396	4620	msedge.exe	135
PID 4620 wrote to memory of 5640	4620	msedge.exe	136
PID 4620 wrote to memory of 5640	4620	msedge.exe	136
PID 4620 wrote to memory of 5640	4620	msedge.exe	136
PID 4620 wrote to memory of 5712	4620	msedge.exe	137
PID 4620 wrote to memory of 5712	4620	msedge.exe	137
PID 4620 wrote to memory of 5712	4620	msedge.exe	137
PID 4620 wrote to memory of 5836	4620	msedge.exe	138

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://biblioreads.digital/?id=13405625
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc9189c188,0x7ffc9189c194,0x7ffc9189c1a0
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,11176724551739998437,12188570715108599990,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,11813552541313561925,5730881271072532128,262144 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2016,i,1254056408547564477,12404703723923366849,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:8
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,9961538638648243103,6054467886604161335,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,16311885583283833823,4655383440277955314,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,14949931530399767990,6551218088156346885,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,3921017804695333541,4297097271485734388,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:2
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,11408591370561799390,16908702532112593771,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,10081284493618696470,10835453826414348142,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,7682713380009303303,1655732603251408816,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,7682713380009303303,1655732603251408816,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6120,i,7541816184937779546,2668759614271050553,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6320,i,7776927314131302509,16951262749860307000,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6496,i,17182201433736428224,3622488673115492064,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6448,i,4497805763839192517,7336295155360902495,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6768,i,14797997221894598167,1688971785984564794,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:1
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,4216663405924627829,11764749710825005922,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,6464778529900695997,6481824372668523666,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,14566390595160079014,5189595343688244678,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=4224,i,7198927620350852651,16641549877704003011,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=3936 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6308,i,13957328189789806879,262128421561411736,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4896,i,15447991571711789880,6600125652094368207,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4936,i,13792841868140650660,582971439504928530,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=3712,i,14515108134586732537,17874337624327224309,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=3668,i,7450607860300885778,13036652732705938278,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:1
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6912,i,5212067693596801437,5942144180976991900,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6496,i,11425859525589407601,9501832432850738287,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7060,i,2234933991864938664,14521018997416071975,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=7044 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=4228,i,10892601111610708441,7861949062130564755,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=3656,i,2693162053827511165,3245809127595199103,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6840,i,12713778209139479797,15263300715458811363,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=4712,i,778357830108272290,7082396217686310791,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=4720,i,1250258889535593756,3907785951840837736,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=3704,i,5398651743249769953,5155830481548677284,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:1
  2⤵
  PID:5328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=5824,i,11105667556461854817,14126350017734172305,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=4208,i,10943588362636258092,10512276283040577435,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,8525922375442054176,15551161953057947918,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=7236 /prefetch:8
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=4036,i,14370518676888927580,12263440898722515097,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=7316 /prefetch:1
  2⤵
  PID:5384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7372,i,524655621661415813,17711526343648745821,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:8
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7668,i,8551940712835149087,12428553915033346433,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=7516 /prefetch:1
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7768,i,10665253034900815721,8016380403019401457,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=7776 /prefetch:8
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7924,i,500971799504741096,9715045089997518189,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=7952 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8140,i,3492124577999162568,14238343359218608280,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=8112 /prefetch:1
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8276,i,17110875335839030650,18239584060549664606,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=8260 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8480,i,17604719991435440160,5060907989381972781,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=8440 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8612,i,3594621485620835880,7086450712339578489,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=8400 /prefetch:1
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8752,i,10850986352472554566,9099065962453025298,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=8632 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8924,i,7918793874870497529,7714191784041241141,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=8984 /prefetch:1
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9104,i,4687389949166902107,13167216074297730286,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=9164 /prefetch:1
  2⤵
  PID:364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=9336,i,6951135748134010081,17685619596165303254,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=9360 /prefetch:1
  2⤵
  PID:5832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9568,i,9821049473451033058,7739657810292764073,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=9288 /prefetch:1
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8396,i,11972319089851351860,12075719429524972786,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=9484 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9768,i,11175661026512719579,11461427211186681814,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=9776 /prefetch:1
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9916,i,18296002347069028003,6450896905768739918,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=9780 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=10072,i,15095734661960948788,15698831288461516675,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=9960 /prefetch:1
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=10232,i,15558988525917938382,6260393068726090922,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=10092 /prefetch:1
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10368,i,16680728757639359648,8498262960703231949,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=10380 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10396,i,1754338370255229768,680037475427783181,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=10408 /prefetch:1
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10676,i,10542980235859557314,4590876647665573852,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=10544 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=10692,i,16160721280630192414,15983828909479411415,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=10824 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10948,i,10624209075526309810,8188634393180970795,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=10952 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10988,i,10176800720383681695,17963701478517756947,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=10960 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=11108,i,502546451422575344,9283602122766811777,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=11148 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=11400,i,5061527117641373465,4164767785606362160,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=11416 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=11548,i,5875671427260378192,12213767393549847019,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=11556 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=11712,i,13546073896940904993,14310018496748497697,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=11564 /prefetch:1
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=11872,i,6391759053618152349,889647095694221623,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=11884 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=12148,i,13469817482207045429,8063508253352915606,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=12188 /prefetch:1
  2⤵
  PID:6708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=12604,i,4706149124396695838,12995018562402509534,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=12600 /prefetch:1
  2⤵
  PID:6764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=10556,i,11679097785759107590,5938544816332767976,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=10548 /prefetch:1
  2⤵
  PID:7040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=12328,i,17217476604581454476,7162681369479654769,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=10624 /prefetch:1
  2⤵
  PID:7048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12564,i,3851569810117155629,15984778485534182242,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=12540 /prefetch:8
  2⤵
  PID:6652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=10824,i,16438781373539678928,10715309209832410678,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=12480 /prefetch:1
  2⤵
  PID:7112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=10944,i,6521116862227739252,9373658065078682518,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=11016 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=8288,i,11113524835132957232,9937005405089395928,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=8280 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=8364,i,17753409333574380813,14340898592744347602,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=11372 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=8356,i,15603464459869358009,323237010486664570,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=12688 /prefetch:1
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=8328,i,15619325750491992464,3523917000211551942,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=8344 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=8296,i,15835493032258894095,130622292302720531,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=12980 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=13048,i,15538469218338286054,14640197155592626601,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=13032 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=11356,i,18144461046056795971,6086462808216133465,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=13288 /prefetch:1
  2⤵
  PID:7232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=13364,i,4740033001157207368,1552619675080730232,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=13372 /prefetch:1
  2⤵
  PID:7244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=13536,i,13251247888614140476,659006484726897088,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=10708 /prefetch:1
  2⤵
  PID:7344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=13516,i,9840254097982275537,4596741891523940548,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=13720 /prefetch:1
  2⤵
  PID:7412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=13976,i,2448058827002139338,10740861837223497854,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=13980 /prefetch:1
  2⤵
  PID:7568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=14124,i,13710681418818870244,16647526728748106001,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=13880 /prefetch:1
  2⤵
  PID:7628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=14176,i,13071440185405814003,13143673546971955444,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=14244 /prefetch:1
  2⤵
  PID:7636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=14300,i,14193231135355488369,15633036417643973037,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=14384 /prefetch:1
  2⤵
  PID:7644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=14408,i,8243556655831669901,10268350526230122879,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=14448 /prefetch:1
  2⤵
  PID:7652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=14760,i,16172290840933246142,9951662666938360718,2097152 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=14852 /prefetch:1
  2⤵
  PID:8188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=14484,i,16333709991756357168,18105144951879742438,262144 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=8320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:8040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=13660,i,10610150544320177382,15027483317671872550,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=13636 /prefetch:8
  2⤵
  PID:7244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,7118656875655438350,13139321454804847820,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:8052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,15926518492393983614,1439331211817348152,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,2530709367203731726,3698217415571907792,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:8
  2⤵
  PID:7780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,9844560710047643901,2615186451314323673,524288 --field-trial-handle=2296,i,6430881885318675383,5310714815887418857,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:7676

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Phishing

T1566

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
MD5 22b29b46992ba3d1fd586e35207b402b
SHA1 03a007676fa49e6e9fbeffbbc2e943124c1b3d3d
SHA512 3634d483353d2e9fb49d846c71c6867053c6a8f1ead10608addea75574d5ce0e36c8de933f71d10bae9682752372e6f7925bbc3c9d982dfe840a9d664f859687
TLSH
T1BDD0243C3F514D50DC0041710530D50435D3CC1740D017070C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0722d2332a17b1d987088843d4afde47ed0fef46ca41ec24bf0c72ac871c5439
MD5 df979415fbb26a6f6d50b30d97476c2d
SHA1 ee42ca747d629d34ef25f965ba20f702799cf08a
SHA512 2e67287fccdb4bc525499fcd305470efdc52eee6dce353d6a1c2a0505117f30fc2122e401ccb315677780f0571eeb30f3ba449dae7e4b5ac6db71e976a1d8e78
TLSH
T1D4E0209585C5C35DD6017447416C4B4CD1D03F1BA2CC7E4D6708858A7542654E2C36F4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d664c0d10702dad51f806a163e721c28e9388626bc3e00399cc7465555d7a60b
MD5 70acd0342ea08a8d41f06416744f2fab
SHA1 acc9c8fa91eb3a4b22731e4634b890064cca5b89
SHA512 21b457d72cbc340f107efc2f3f06321440477e3107e43b6c2071b3732fdd031faf6e5cca6e4b410404a555d8a6dafa1dedadb8c809a87823b3c6285d909ddd2d
TLSH
T1D9E0DFC446CAC32EE64464578168870C92C43B1FA2CC6E1A570489897643140B3836F0
MD5 SHA1 SHA512 TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 51KB
SHA256 416f4d480ae9e3e3f78eb6a4479309b1c1530d1af43757d8d262d2746b81a230
MD5 d15094c156dda6e0cf2eb6fea25a85f7
SHA1 546d79a157d35ad38c3337cc6788c86aab57e2f2
SHA512 3fb704fa69e87b8a6a915ac1e55cda3a7939c00f6535da28bc264b24a06f7646a709bd272e2a7d6dfee42ae09091cd246d797292765d49b83d1d79f164fe7642
SSDEEP 1536:Qpqd/GUJw+GrkjPe0qowV33rDrTOkY6iIE6yKMVNuOA:FJJwTrkLeRowN7DrTPY6itkMA
TLSH
T143330283A943050612CA5EBE9C56892BAEE47C412D06FDBEB81CDA11F5664343C8F9DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 219KB
SHA256 e68d257ffc04a1f2c9c04a41c55cb59c0c2ee58683d3155171b9ce0521150b7f
MD5 9acee52e7c85ca8d2d94cb2e47abb991
SHA1 ffd09c26491e518a341e858e105e157ec29d264a
SHA512 762da1f5b2ceac889556e410d3d5a5779a24ed6aef69509bd7f201c2ecf92a9d51947996673577f0e0ba5e5cb3c3c85bb04441893d2f2d2d4a6193ec87bedc48
SSDEEP 1536:gt/4tPzY3krp+t4y4JBwlgb3ja93CMSu7TzLm5kFh29h2hxiGzLm5Lrup:GqhJBwyb3ja93Cb8TzLm5RGzLm5Lr2
TLSH
T1AD24A624B617308F6383DAC8B7B28F925F1450619E4F89FDF6E5252C92C44752A72BCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fa

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fa
Size 36KB
SHA256 d7363f4e4edc10cf58d1c9de9f41a4e4010148cc47396231660f7d88dc9461ec
MD5 1aabbc2af307a0a55cd4da01fe97a100
SHA1 4c479609cefb59185ab4f4c47d05d7632c768ac1
SHA512 066d43ccfefd1e7c527cb670c85b2f96d3c6507927483266e9e6e54ebb31c250daa4716982a867f98bc8dda605e14e3ffae7e2175ac7f6c7186068749f8ea7a8
SSDEEP 768:n5XRSOrAYnNTERvIvPiJu4CNtd4aCuyvhS3xaqIcvLKlBHD7vGayi9x7oFq:5RcYNawg4Ph8/s+lBHDC9i37oFq
TLSH
T11D030271472806E238B375BE111B014336EBDC077E0162F9F492FCB28717A5CAA57176
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000102

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000102
Size 73KB
SHA256 49a03740a4e90cc48b80dfd321acedcb4f185737b0db715b9c457e166ec228c1
MD5 e22ea5d77c21dbe09b4aecfd78c99334
SHA1 75971b5376be038ee88b73915b0b95fd329643d3
SHA512 0ed60669feed190769b287ac60aeb0269de18a1010cc794473d9e5077e8cac29360ba45d2fc6fa4046243007632880752afd9de90632be551e9bd20ec258489f
SSDEEP 1536:BLgIdWkCEDXIwf1f1sPYNvx8l2bNrvB1xmDfmxVlXrJMl4:BRWkC+XI61sPevhtB6DfYfXrCe
TLSH
T11C7302B1CF3A4FE4F54A70B1EBAB01BC8169494D90A486A941057C1D3CC7ECACF2BA5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000111

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000111
Size 97KB
SHA256 6e9619cbffb6bed8cd7172c3bfb896f170dd8aac932a3f1ff11bc035b9d53e6e
MD5 7d4f7c31059a29d5ca4bcc8c3090edce
SHA1 1ad0961998e6fd8a57ef2ef6ce4bdee9fbd555f5
SHA512 c283558d93643e09adf26081eee657f56f1699ae7f25a26c25ac19bd6372744b983751ef58cb88f632c1b67394643fa2ef8e6f8d61bfa39887ccbd8ae2f951a2
SSDEEP 1536:c1Ah0NShqi8NjZ+0sw9S54zgbiEvgZXRkSr/TSg:cvN19v+ZwY5liEyS6TSg
TLSH
T1C7A312EE8B71C246E90D57294D20724EBE7A834417C8AD26FBE1F713C6C4091CABD746
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1840822274c9736_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1840822274c9736_0
Size 261B
SHA256 2f3a96f191c36bdb9528618240b0198d30bccbc3c01101776d705d4d58ca535f
MD5 e0cbd89811e3e4882a4e35991b1b7670
SHA1 493389e3b57ac8ed3ccbfb173991c9f2378e4e24
SHA512 fd6640ef9b03096e9f9aa64d8af379a4fc6aa6f16289fb69e21a64af8461ab1e8cbfeab6a638cc940f78b44f5fba56fd8db85422160e1dceff84f39292565d81
TLSH
T1ADD02E8B24896801C66E49FBFA33A20E832294080D9C9050421221E2065A4F4B2B968B
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 7KB
SHA256 ed4e2c306f6460930b14bbb357ed370726a0c429abff4e635dd8f53d3fecef51
MD5 6e6632293037525fa179913cd7472765
SHA1 9a6084c671bba95e5897c8b52bc4f0254b9c51b9
SHA512 cd3c24cbc4b0c930f42e0c2ee0ce3271641dfc3d64d0c3f7f8a930d4b47e731ad974ef3d26c731f4208b70ed9bf91847ec710bd18ec02056af0988822fe6a5d9
SSDEEP 96:b5sPGSUwHw1bcHdMt7JyD+cP6FYLB83OeVyMjsIZwDrC9IIpQMZsHUSL6yna6pf3:ObQbHwPRLMTBisc59yHIy8YGp
TLSH
T1CCF191A3A3F0A06AEF15D0FD04E289F375B1296C1647BE53055AC3B43EB338939457A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4ca20f70f30590b14f5d6bc7ae53f230c9972201cc2043018e32f41e82639da2
MD5 31fc4f31f12283bfaf882fbe44499ec7
SHA1 458551f05ab095a673a9d9b48d836c23736c8647
SHA512 caf64e82cc4afa31eeaf240905ee59578f00c3c83e3caf00571f5f3621f6365f2d81b32542f4c1e309e022e00e43bbdd463aff1dc5554946c6659f3ad01ece05
TLSH
T172610782D3F074A5E796B4B061D91E9B3AF855B663874E52009CD6F4AB573C0334C1D3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59291a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59291a.TMP
Size 3KB
SHA256 5ce174a294fb6592e23b8faf9fb5b60e428e648bb9e6cf98694ccd3d33c07fbe
MD5 1fbf1d2f72241c2e05154646e8582d63
SHA1 77e4ba762ecd79c824919f21603b31094930964c
SHA512 f2ed5df0f935477d4caf4e816835fbbb3a18c82397e9ff1d0ae0a63016bff104f4afffc2a5f7ea720d8589624e5db470a3b41eed03e677930f25df09b057875d
TLSH
T147613B81E3F070A1EB9870B065D91E9736F885B6A3835E66119DD6F4AB473C0334D1D3
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 fa2cbe4c898ac9ea03de265eda5b27223c54f6ffa05c596c6338f1a00990efd1
MD5 15760d6ea1e4aa70a86d0982562dd933
SHA1 f05faebadbf0c5fc5785ca817f175eb0ddfb7f54
SHA512 4073f121c243329461150ea7e3d09a22b660abde71e8ca763ef7933bb4957c3dd5317c90b7782c5f9ccd5f2e9cc4e36e5d602a57bdbafa195d25175f3273fc89
SSDEEP 192:DBJhSI5JNl+y6Wvgkg1uPOMVkasZkp+0N/qKJvbYAxlVi/WOdnl:DBJhSI5JNl+y6Wvgkg1uPOMVkasZkp+P
TLSH
T1B512BFF3C2E5866DCD1256F0EB186E1ACE5D0918535C3D1AC9E8EF4B93E25B1D20168F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 55KB
SHA256 c9c37bf1350fde4bf120fbe3b35ee90ff8ff5d7c68f45c38b4d06548f0a51f2a
MD5 d195981c4449d2bba8a84ae534ac8d76
SHA1 5e291efa295d56b646171af1156796f3f20359fb
SHA512 623ffd43d0c380bec0f6c4db66f683dd1a8820092a33f5887dffde6ab71679fc5ababf0e1a5b2d4a4fc3aebf65e0baa179f749075781b2892449650cf00ce2ac
SSDEEP 384:DBJhSI5JNl+y6WvgkBOooOc2PoWZbxFGBIDIeTyenxJW5xAteGePJBBecJgJkgeX:XsfpmT8bLUNTD0C9ZGCEWXZ69LWZOT
TLSH
T14B43BDF383F0897ED91266F09A246E1BCF5D0459031C3C7B8AE4AE5753E6872E29164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 57KB
SHA256 9f7f747f12b41ecef749418ee34efbaf4a4456d75f3a160ac729219bc2c5bdda
MD5 62f8d8271b07e260864370f198bb6dcf
SHA1 4cc7d1985214bd9d8e9217f0470516529b99ac05
SHA512 b4049ed10ae980abe376b32c7bc51c7256d7d5f44b7a0e0240cb78ee106ab672411bda2de11ca30409db301e90364b9e20e49b733223781630f3710db54916a3
SSDEEP 384:DWdTbiXwd+y6WvgkBOooOc2PoWZbxFGBIDIeTyenxJW5xAteGePJBBecJgJkgejj:EsfpmnDmLUNTD0z9ZGzGWoVsLWZyZDe
TLSH
T1C143ADF383F08A7ED91266F0DA146E1BCF5D0459031C3C7B8AE4AE5753E6872E29164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 209B
SHA256 17c383ee935282ab04f96b664071aedf6abdc9a83d060e5a74794f2fcf1ca01d
MD5 33f4579c89e1a6f3646b54be81a25358
SHA1 37c887eea53dc1f53b8751dfe4c459172498f68c
SHA512 bd0b7e34c83c02c62bb0ac19287928097cb51065894813a7a9d84d97edf9f2bd800443d8933e415028f33d83bd8f13da2020d5b0248eb267c323ac774068f989
TLSH
T1C5D022632B5970F5A97C6EB190AAECCFD3B600A0EC42DED810E39CEC153687C054B240
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5a0b4c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5a0b4c.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 838325b1351594cd11c08821dc5d7108fe309bb98f662b70e59139da7ab61e4c
MD5 ac3cc9ac2d7fbbcd109c427a928ca293
SHA1 eed15525c2eb23e39c9af826ef2b4d307d434441
SHA512 2390dbd9440c285c8824ddaeee6cde6fb02020cfe384649e28278777e3ba1cda926548605323335d435446a6d78cc60a082116ce8d4bc970336cdc1976c15765
SSDEEP 192:sxZhRFWO/fWslXIdpCM5OtyHW6+WNqrx/Y3L5lIgrJ:sxZhaO/fWsl4LgyHb0/U9
TLSH
T16022B7126E78A97B8CC7D219FA65BF13E6F95031A1D01E58FAFC861C04E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 333c1dbe6507d72bea7166531e3e0c9937d66346e8c75a7b6a96d49e7923de76
MD5 7a41c135a9bc8ce6a01a5243f56c45f8
SHA1 98bfa575d8dd6f5187257c912b9c0c8d8a9c196c
SHA512 7d3c958948b518b8d7903fdd932299366db5842b506353450dab298e8e792935aa6fbc303cd8e96c7ca9b7194aab863e73a41c98a54a9d47f7d9a4b6d1f9dc32
SSDEEP 192:sxZhRFWO/fWsxIIdpkcM5oQs7tswHW6+WNCdB1edjQZ/Y3s5lIg5AJ:sxZhaO/fWsx5qKhHbH4/16
TLSH
T1BF42D852697459B79CC7D219BA55BF13E6F9903291D01E48ABFCCA1C04E7BDE2207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ae96c0adc1496bdce07371013dfa481c487efbdd268187de00d1ebc5105acd0f
MD5 01e40002150c317e0bfe834b9d3ec4a1
SHA1 9de7fa5ae6133f6f23330d0d2b9c3a7a59cd8f5e
SHA512 49775348fc58d9124cc9b37b47449c53956ec28c347c6eb134d2f90106ecf224320bcbdc6fbfbee677fe7f08339c9a7ddd5aab18e348e0517f53fa2ee9c504f6
SSDEEP 192:sxZERFMOO/fWsxbQ5L4b6TRdptGYhYMjAGCQsAtsT0HW6+WNC7WK1gg1edjAHKoa:sxZEwOO/fWsxeRX1nHbdPYBM/u6
TLSH
T17062E64365701ABB9DDBD269B915FB16E6F8503294C05D8CAAFCCE1C04E6BDD2207C87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 b7715dd6cd2255862a6cc37da7464ed5fe4f364d05dec2c620662123d3673631
MD5 858b52428985f48cc9bbce7e4f8643ac
SHA1 d45e1ad958eaabcce0c3bc0ad506ca3cc0db47af
SHA512 b961b87ce80b9692a3564e7c03908f01e3ad1d3fb0bfce9b3660fe134cd5a7d1f6bd044ca4e9104fafbdb63b0b0a6f4b095691e0b7e8ceca9ddd454dd3b1f996
SSDEEP 384:sxZEamzO/fWsxIRXYnHbdPYBM/u8X/k0ss:sMamzO/frLHbdn/Pk8
TLSH
T19482D893653099B79DDBC269B925BF16E6F85032D8D04D8CAAFCCD1C04DABED2206C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 3ec2da6a20f2fe3c348a420fafd19182638e3e96330c2d458acdb9e54d8eb771
MD5 a65c8b4caebe273a676178a133494fcb
SHA1 8ac702c6815023a497120548909a193ec644ecdf
SHA512 4dfd8c65e15e08bd617d7147555e84c7504ef4086b57cdcc7cef6d327a1e8d49ed644ef0f6189807db8c7dca671f0fd033ae957d062aadc8aa9dc7fbadc89c80
SSDEEP 384:sxZEZmWO/fWsxZlR0YnHbdPQvM/X8X/k0ss:sMZmWO/frZJHbdhsPk8
TLSH
T14C82E753653099B79CDBC268B925BF16E6F85022DCC14D8CAAFCCD1C04EABED2206C47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 5384671656833a015f9cf516b70b760f84fcea99f3f274066a3510d8303a1b85
MD5 b4ead571a363d6c086f070d9a0b873f5
SHA1 a9a393832130db534d52948390dfaa6fb29a4063
SHA512 fcaa7b5234cb952bf512ef635752bebc06d2c0074bf96f8e6ce4b43807c141ce42f8396b4799bb80f479a37dbcd1cb49284f36322380920d11ec7c32d5ce31b3
SSDEEP 192:sxZhRFWO/fWsxRIdpCM5s7tyHW6+WN5116fY3Z5lIg5AJ:sxZhaO/fWsxaLGyHbAfM6
TLSH
T11F32E8526A78A97B9CC7D219BA55BF13E6F9503251D01E48FAFCCA1C05E7BCD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 31KB
SHA256 166c15bb4426ec53fb078d52126f3a96a6a3ac86e9cc47d9ef425abcc42f10e1
MD5 237278c9667fc68af273cb12282230cf
SHA1 0cd24d35cde527a67062ab1e0b8af5b23a3d5169
SHA512 59a57a0af3d451fca4b186cb9fab6823992629f1fb47af39f6617a3bea33a458b2b69dd66cd8d4e18c5cce07a670c94a305a4118e56299a442bc826dab44dc39
SSDEEP 384:sxZEZmWO/fWs666s8qMpRiYnazAW8pZS15posJWeT+UKlX0YnHbdPQvM/p8X/k0v:sMZmWO/f84Mnc7WeT+UKrHbdhuPk8
TLSH
T1A7E2F9429520C8B79AC39D28683DBE36EAAC505259C5CEDE6AECCD1C00DD5FD6B07C93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 adc7b82141c32544a930048c2ab4f56f92c568962643eddba59e03a53a3de0e8
MD5 fa5329a789f8e6daca38b3ae170079c1
SHA1 77daa98e7114756459a31a25631c2aa3bf579ede
SHA512 0939218842eca66f48021d51cb354db381b859e696e73ff86604d4e4cbbc7de27886d54109db54f8c4d57d3a60b9e5d50c2e49a10649e30447e338745a1b2c30
SSDEEP 192:sxZhRFWO/fWsxeIdpCM5em7tyHW6+WN51OFZY3m5lIg5AJ:sxZhaO/fWsxPL9yHbsZ76
TLSH
T13032E9526A38A9BB9CC7D219BA55BF13E6F9503151D01E48BAFCCA1C05E7BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 857779645bba84f5a99fe53e445cde1882fe7b381b076a476cc7a73a5c32a2d0
MD5 00075becab825d187581273c769f06d5
SHA1 bad0530760c599b8a5efa2ac92d5b6f68ac7be37
SHA512 8fe7c9b6323844c51d96f354465a2617669fcf40d057e2d0a555efac6aef357c9f624f5e1b8ab073bffb3c7b985dd102cbb370dfea07559442772d3310c71f54
SSDEEP 192:sxZhRFWO/fWsrRIdpCM5f7tyHW6+WN51rx/Y3L5lIg5qJ:sxZhaO/fWsraLjyHbd/Ug
TLSH
T1DA22C8126E78A97B9CC7D219FA55BF13E6F9503191D01E58FAFC8A1C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d749adfa5001bff716350fa91cf66a89c14e2a8196aa3728a105b2be24e24bc4
MD5 9cc75c1cc9a7ab264f04e770ff0d2644
SHA1 349b76bc9544d239950c5e5c551132c1748cec4c
SHA512 d8b5354acac4f7d9c2137bed47c37f1753472450476fc2d8195ea5472f17f11f45d938190a1fd633c0443af17b4bec0a373f3499259a5e90c63802029b60a573
SSDEEP 768:Bj30AbSWvS2998F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72erolZMh7f:Bj30AbSWvS299u1jaLmLZ121kf
TLSH
T109C2DA3B640CCB7E4FC05A9DDC6AAF9A2F9C02C796548D4447FA984C02C77EA512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index
Size 744B
SHA256 0b5ffe6be0d9e43b43411c5532902350e9f3f8808cb422834c29fb137c612b1a
MD5 3048830853d2cbeea16fb2ef80c15831
SHA1 c793f6c80b83097d853bc326911790659e23bb36
SHA512 6af5ebb3253bd0bab92586d57275701179d5b35bc02fe5552aedceef2eafa1e412e5e60f22485b1efe5bbd129610aed588ac5fcf97131868be606a0ed47dd13e
TLSH
T18C01209B1D238A0BFD150175B03DB406A5B502DC83503B1FA2BEC03A9CA6790BE406E4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index
Size 3KB
SHA256 a593758abc557d74343aa2f74ab09e46069b2fda43616554082939aa873ecfd1
MD5 8cd465c595672ee258d6aa15022f045c
SHA1 5d61e703fd7570990a63b4af37a38fedc2217d06
SHA512 4417a8e34182f4cf18ee47bc9d4d8d0551e5de3f17dcfb328c6822b309604809e63370e56f223fa8a82a91180634d7970d6464a6f6edaa788cb412cf7a1414f0
TLSH
T1FA51F84E5D071B1BECAC927119B90409373428CC0BA81E2BA4EDD138EC8362C1EADB59
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c25c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index~RFe59c25c.TMP
Size 744B
SHA256 4cff86e7a1e8a730d96dcd482795563fd4618eff084e0939d93b7995f6e86db3
MD5 62b87a1e38867afad5dbf97bec539073
SHA1 29fe42de095db1a7848c003f850996c54471df28
SHA512 508b69fdde3964800964dce5abd0446362e112a452fc52de2088256b0883d0277b66d1f95fe2427232efbf61df24f8353afe559c3420860e06d4748526422530
TLSH
T1710105D601138B47FC040271DA3C6415717685485390774FA3EBA06ADC937806E83EF1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a54f6f44-5155-40df-bbaf-5ba8cb84d61f\index-dir\the-real-index
Size 72B
SHA256 eebc0c90b6b56917a5543461e6f3b50c7c8ebd1f6022b0fc238569cc758b13f4
MD5 f5633878e0678d9cf0bff6544c6655fb
SHA1 cbfa5a96e9b8632ad7084bbcbe62ce53888289f2
SHA512 c96286fce37010658c9d5ea458817b489587e923b079af4350a2812ef832a19c1537549950e42c8e168e80268235befd7d47e3c200b815a8df57dac61e166683
TLSH
T1BBA0025456800841C8063BF8279727533310CD7A434137874DB20A5CFDB45498D6264D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a54f6f44-5155-40df-bbaf-5ba8cb84d61f\index-dir\the-real-index
Size 72B
SHA256 3207f0e95e8e26ca9aac136d5407b17410fa5c03a0e02309c097aea54eb0210d
MD5 cc0b76e7a92a7115c8a6ade689462672
SHA1 802aa41f5fb7d2296555cc45b6069dd6b7e0abce
SHA512 ed3501b5783cf852550f2c7d973a476edcec4cde3eaad1ef52100f32178d55cb0df07d1ee66ba7fececb15d5e2c2aff30b2a65207385655a22b26f29d4d417cf
TLSH
T154A0025243D5004DC05691B1555206755302F8272540534BC1914059CDF16809FA208C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 40a4f737506cd5bcdd636da6f2dcfe02fd71672c22599d5bb2cf279c215c7cf1
MD5 12542a83c9d5b24716c69bfe7f9facac
SHA1 616e5565474baf966ca1502ee1647ac659be8f2c
SHA512 588ebc26bf06279b982b180904d36c6881c5df51c03867b1ff124164c380b336d4ce83d10afeef95bfe0464ca52c1653e1b29322746a573dade31cb66d9d486d
TLSH
T141E0C0F62DF71850FCAF83D4247088B181057894DA08FC4F10AA63C7A4B03113805C50
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 9382da3c73d6eb3f2a9ae8c234f596a2e1d32486db7213bc3a8f16da894f142b
MD5 fdb671cc8ed2fc32755292621ffc050c
SHA1 daa7013213bfc6d33e790711eae30e7bd9c76658
SHA512 aaca658e74f2354ffea43642fcd3ff1f00ac3f083c6aa559e6e9095c87f58ef5d6d38c74cf26197cb8140d48af12c219fc273d505a21847e03532f5d4a5947f6
TLSH
T138A0021199588081C86C02F891655F95771188980709369A91ECB3749E531A44292904
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1907.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a1907.TMP
Size 48B
SHA256 f162a1b11473b909ce2fa89b08a8168beb5ac879816c9258b1dae4b89cc104d4
MD5 f632d844dd03270fcc319b650f173aff
SHA1 0af0054fada4844d195fd277650e327a8ed98875
SHA512 27e111ff51eae72459e4d48668fef127660429ef582e3816304b3b1899b2c315d273ad4eef76bdd8cc5300989d28b265a232c5db18e8867d55872bd2b7fd3a2f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 a57df37c951a209abb666567fbbdd3f367554d5091ce145f5a60302b9e72076e
MD5 c59ceec5d4bbaa686920d0bb53414b8d
SHA1 5aaad634702ae8fb0c82383e89886166fae09862
SHA512 c375ebcc8f56113a320f634e0788d0d0534ef8a8b95c769cae8d5adfbf37e0d586080f3d6e2d00126a4071c0ff912d58fd50128091d6855170b53ed99f875a53
TLSH
T1ADA002100F874842C4554AB891D907957790CD5061012B03C1E19396ECA0DD09E8A501
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\FileSystem\t\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

196883d4-ada9-4ae7-9003-2bbfde76fbc2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\196883d4-ada9-4ae7-9003-2bbfde76fbc2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 642bd533496f2ac73dad41671431128e01b7aad55adef8343c2ab34f8c6e8de8
MD5 b6a2b1f561a7305002aaac5fc1db96fc
SHA1 feb0c7b1778faac9ea2f7773438d8a63d8a56b1c
SHA512 bd33d3011c3421f85082efd513478309d7218cce8099319f7dbcc06aca6109a7c8c1456a9ee3bb8b372e7e3f4f0a24d7a25681798807a64d617e3611c2b277d5
SSDEEP 384:HZcIhsNS/UppuvDh29iX5Fs+s9soi+2VBIVZh6DKhHXHoM:vh+pqhiaQUlVBIfYGHXHX
TLSH
T1B1828D32AC785C765DE6E651F4473A039EB85063EB8C6F84C4ECAB1D02EA594131BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 520c1e7550beb53824725fe1cddd6d1fe27520c8dad21b7959265a98fcec70b6
MD5 09a8b5d6000d2ed35b12307a8724251f
SHA1 3127b4a5f82d11d94a9642f52e92a7b2431f08da
SHA512 d332771414d451a198eb7836d11fad4069136fcf80ecdb6a07005017ac03e88acfda0aacb420ef8abd7a5c454ec2e17151ded4f98a06b7310c3df0d37a689419
SSDEEP 192:LON76Amwp1QmiUyFwwsiX5FrY+s9ssFi+2ulRnqgIU6:LON76ipTTwsiX5Fs+s9soi+2cBIU6
TLSH
T13E122B36A8785C3B5DD2AA51F08736139FA9116BDF8C6F94D5EC1B2C02DF55C530B822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 571672ccbe4463f76b7c3f95fe565c576ebfdb80ba0ae9755ff44d2d0a8578a4
MD5 01795fc307c1e3266384fc3ed075dc03
SHA1 8103ebd1f6316f614d0036d4796b9d8d31c6266a
SHA512 910be0c27b7e1238a1ef55d4cbefaf68b0cc23a83ed7162a72ab4037c3b1563133c64fbb15b2a3819e978850bab0a0be3d7b6c1bce5564b8df700a417af7ef83
SSDEEP 384:dZcIhsNSKUppuvxh29iX5Fs+s9soi+2VBIVZh6DKhHXHoM:FhdpUhiaQUlVBIfYGHXHX
TLSH
T195828D32AC785C365CE6E651F5473A039EB84063DBCC6F84C4ECAB1D02EB9941317D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2b6c08238ea1adc6c23020f74b93fdd12ab267a4b9a56b6a4e607a823f3fb7f3
MD5 551af50ecbc5670e5b46243f03b9ec0b
SHA1 d424586a634ba16eecbf0842475e2c28d51e2a91
SHA512 eea87b161927da77d3d2e2390125636228e5c72d9fdeb57ad80413fd362a97dd113c45a029f1d590bd1106dceef603adbc114fc538bd2f2a73ef5060b91743e4
SSDEEP 192:LONs6AmwprQmiUycw6siX5FrY+s5Jiz5U6:LONs6ipdE6siX5Fs+s+9U6
TLSH
T1D402EA35AD786C7B89F36E15B54B77239FA5116BDA942F84C9E81B2C01D764C1306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 0e3c49bd63fac1d4fdb2ea7ae11cea1a93490f80b2e9936e0adf103d0ca91b50
MD5 9be2a0d24167ae0206d89d34f41c94ea
SHA1 ee9c7f785cfc6c98e428df36685bf72219d6e578
SHA512 c9ba2d339f5d1a26b1631ef08c7df49a1df03da4b7abfe01bbfd6cc5420fca956358d8d3c9a351b06f4c905be5f52fc42ca1cb21ef40878517cf3d74cabf5a0d
SSDEEP 384:IiFiZcIRzsNq8TUNTUlIlKUppuvS89iX5Fs+s9soi+27BIVZh6DKhHXHoM:TFQhjwg5pT4aQUl7BIfYGHXHX
TLSH
T136A27E339CA4887BADF6DB41F54A36038EF840A7DA89AE94D6DCAB1D01D75D8130BD21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ddaa33186357a617b792443ab50206e6ec2da3c7ec6519c41964f4f393e8d620
MD5 f234a4ef4693a91688a00acc1db213cc
SHA1 168e0760c587b6e759f5a9a73afce1f401df84c7
SHA512 d74a67a981f431417f17d65bd34ff81c5765e417d8fbd4932450cd45ae0a8783a19f003818d0c4740fb2fee570c39d9bc9abf4c14e202a07a0e45a7df7552cc7
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 1a39401e3a917d1c835d8d562337855e130ddaa435ab03370ba31ff1b454094b
MD5 b5696e649b4ae827fc8df63b93703480
SHA1 169811a399157d08c0a170217b37be887f424823
SHA512 00e6327fa656d728294eef394409b40a6b429a26e31a8030202b6dc57a5e47a442b9f5fbe88ec06b057a0303e8409292fb70489bd6f6af184ae4a7a9e86c9f04
TLSH
T1FFE00143230041EEC4A8877404831F212BE3C03012B3034B5EA116690C677102E34A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 a8a7417f00d06ed2d4ebcebd5f1761b1f7b607c71cf9f5cac947c90c3aff4f85
MD5 d516a903de6429976818798e16b0b6d8
SHA1 b5fac22026c18e4657b3c7809a4f393c92835875
SHA512 5f7db6297d4308be9ac06944063dfd73842f59101c43d90fb0fd67b266ecb3a1b46bb8f34531608b344715afb7fded6a2cc603af163780061c85807cf24e273d
TLSH
T1A3E00983230051BEC4A9877845C31F217BF2D47022F3035A6AA1167A2C677115F78E80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 7af18a406a3be0f8da5ecea24a45c519dbf6ee0c3707ecd08bcca22065178a94
MD5 191bc527967b745be8d7804442c92d27
SHA1 8d90ad7715690e0ff7b65d4d82f646a3baf6c1a3
SHA512 f9d3c1b66a0535907c84f182c71381bd751e0967fd19076937e917c2b7cac16c42fa4128beb194f944e56d60c0c0908d79b333a0dd5d56a8152053822ede7497
TLSH
T1A2E001921300007EC4A8433441831B312BE2C06022F2020A1A6001695C133002F34F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2741b6794fba459d551ea017eb33d049ad71603f8081de3b17af63d9171c4fc2
MD5 a048b11b8f5ce2e0be45cc0bd93229be
SHA1 6aa62eb1c8bb17873b041ada607c92f2d14ebfd7
SHA512 3b620ef03e1365c82d9344788dfadc2ddbebc0e6afb115c6104e9427493c1557d99a86ba286c948b2dd31c7a8275bbadc47ef18c291011c72dec222638caeb18
TLSH
T134E048931300107FC46C533641C30B313BF2807013F3160A1E6006799C473046F35F81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 af7b203d3fea5a6bc7192a46709d2372372a24b3b60a73bf979310b6e21e3243
MD5 cfbd7e2d50decae1ddd51531e2082a2f
SHA1 6b5270cc6798126249455c9c7cc90d232e22165c
SHA512 db85464e6b4fa89db8588a27172861d267450289cbc6dac80e8a0f449b95bc28ef07062b34bcd91d40f412b9e2d3c759db91107d3a10da5d6da60778f34ba2b1
TLSH
T1B2E00103230041ECC4B8427404031F210AC3C03010A1034A5E6116490C677102E30AC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5934b2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5934b2.TMP
Size 392B
SHA256 338d5ea4724b6c3af1456da6dff056b9e24e7036f135d5c6d90980140962bc9d
MD5 eb82131aaf4389fc9c0394a2b3f76ac2
SHA1 d77071d141429559490e8f5b804d1f81c51676bf
SHA512 2448cb851b36ddc893116b70eeadd899eef29f19b8b68e7694bea3ccb4e1ebb9b4c16e88749fb5392f47365052b176112ade6089131053ae31e3e3513fca2a02
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bce62c14640168d411e9361e40ad55a0593a9ba2dc7dc3a0b06f4ad0db11bab1
MD5 05ec39f60794462b6961c90aa754d830
SHA1 9e4a99501df9d186da0b2dd12c77d67c9693e0d3
SHA512 83afe377cca60680a064a8ad2bdaf3a9825c18f1b8d9640a4e193256d2a8ab30b3b5343ee645f31994f32ff5b64216462940e1ae925ac164e55c8effbc441d61
TLSH
T165412A48B6FA1108B3776E1A9FF6982E447FBC771E06D46E10110E4F0667A41C9B1B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download