Analysis

  • user interaction
    yes
  • max time kernel
    1127s
  • max time network
    1175s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/09/2026, 19:42

General

  • Target
    https://www.google.com/
  • Sample260930-yepgrsshqc

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Drops file in Drivers directory 9 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 11 IoCs
  • Loads dropped DLL 55 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 4 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Looks up external IP address via web service 1 TTPs 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in System32 directory 8 IoCs
  • Probable phishing domain 1 TTPs 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Launches sc.exe 40 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 10 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 32 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 6 IoCs
  • Suspicious behavior: LoadsDriver 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 28 IoCs
  • Suspicious use of SetWindowsHookEx 56 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.google.com/
    1⤵
    • Checks SCSI registry key(s)
    • Enumerates system info in registry
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3300
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffa184fc188,0x7ffa184fc194,0x7ffa184fc1a0
      2⤵
        PID:5928
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,17645381457286752796,6997786281479975134,262144 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
        2⤵
          PID:2148
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,18318704472232948249,16026905723534341715,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:11
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:1296
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,9236059607830483676,17196956018758934638,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3264 /prefetch:13
          2⤵
            PID:4312
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3644,i,7687219824110025520,12353750828438034213,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
            2⤵
              PID:2804
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3648,i,310386708523928172,18254440555590485465,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
              2⤵
                PID:3692
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,763348251846251386,8809161240652722603,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:9
                2⤵
                  PID:3100
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4356,i,8954201367658445272,7375015496609355302,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:1
                  2⤵
                    PID:5680
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5504,i,15160083038926545060,11363843302989457789,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
                    2⤵
                      PID:2260
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,6819622637399393878,11219061694416134416,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3904 /prefetch:14
                      2⤵
                        PID:2568
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,225567097477353691,1004704697772211720,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:14
                        2⤵
                          PID:4440
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,18226013750036975796,10951083545694878960,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
                          2⤵
                            PID:4376
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,18226013750036975796,10951083545694878960,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
                            2⤵
                              PID:2016
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,3183022434436488746,8621900366691936871,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:14
                              2⤵
                                PID:2756
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6412,i,9135474071032679963,2450026136455507092,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
                                2⤵
                                  PID:5496
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4568,i,8433312912495738847,12752338969403104194,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
                                  2⤵
                                    PID:3752
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,12774370178425249283,12463670240093287875,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=2808 /prefetch:12
                                    2⤵
                                      PID:1520
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=2960,i,11464366806613064401,1736333546374520504,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:1
                                      2⤵
                                        PID:5028
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=2648,i,4563307599822902836,15220116205662651678,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:1
                                        2⤵
                                          PID:3552
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6608,i,15158569625812469233,4965680154917529746,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:1
                                          2⤵
                                            PID:1300
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3060,i,12470426896710553175,11904675209500906704,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:14
                                            2⤵
                                              PID:4844
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6048,i,15636352834593297824,7718922456560706553,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:1
                                              2⤵
                                                PID:3752
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3796,i,3695881643919281895,2413265712820917085,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:1
                                                2⤵
                                                  PID:5604
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,17065372659741226587,14040717919797919959,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
                                                  2⤵
                                                    PID:4980
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6848,i,17161196110830117996,15912638590525047940,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:1
                                                    2⤵
                                                      PID:200
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6988,i,4939077722263327391,6162440543511450375,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7032 /prefetch:1
                                                      2⤵
                                                        PID:5416
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3824,i,284484725947038705,12015417790291146888,262144 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:10
                                                        2⤵
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        PID:4128
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6740,i,9974250993089182871,11115928964843195770,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:1
                                                        2⤵
                                                          PID:1036
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6192,i,15269919202847898101,17925252500900036095,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:1
                                                          2⤵
                                                            PID:2952
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=2996,i,6223297139564375046,10478799639599268009,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:1
                                                            2⤵
                                                              PID:2128
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=6744,i,8937341566642118275,9789082467166868650,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7132 /prefetch:1
                                                              2⤵
                                                                PID:5716
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=2728,i,13904229498760412733,3612991387687281487,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:1
                                                                2⤵
                                                                  PID:1140
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6944,i,13103233246923180305,586134745390035406,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:1
                                                                  2⤵
                                                                    PID:2288
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=2488,i,10436151764124075435,16149204984626186772,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
                                                                    2⤵
                                                                      PID:1120
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=6812,i,5582837953982780098,15897451224035190142,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
                                                                      2⤵
                                                                        PID:4752
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=6044,i,15842460872471458242,4174569772545425823,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:1
                                                                        2⤵
                                                                          PID:2988
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=6192,i,13642660705693348453,12894231486514850799,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7204 /prefetch:1
                                                                          2⤵
                                                                            PID:5428
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7608,i,13095555046878308261,7271511066589129467,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7604 /prefetch:1
                                                                            2⤵
                                                                              PID:2008
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7744,i,6972378968596536325,6534684293270923975,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7824 /prefetch:1
                                                                              2⤵
                                                                                PID:4128
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7780,i,1658695054821126192,14005476666807768215,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7828 /prefetch:1
                                                                                2⤵
                                                                                  PID:2488
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=7796,i,5392865549264781119,13638896345677074465,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7856 /prefetch:1
                                                                                  2⤵
                                                                                    PID:424
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7792,i,17409683138930740286,15016043715258632577,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7832 /prefetch:1
                                                                                    2⤵
                                                                                      PID:2304
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7804,i,5613539825556652565,8388601628521926130,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7876 /prefetch:1
                                                                                      2⤵
                                                                                        PID:3400
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7816,i,8108636890491777114,15598296716493970761,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7800 /prefetch:1
                                                                                        2⤵
                                                                                          PID:1068
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8632,i,15380972474249125878,2675206441292325855,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8660 /prefetch:1
                                                                                          2⤵
                                                                                            PID:5116
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8796,i,9974911457568246626,17097708770748251428,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8868 /prefetch:1
                                                                                            2⤵
                                                                                              PID:4288
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8800,i,10119747493106417494,15974212667566902316,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8872 /prefetch:1
                                                                                              2⤵
                                                                                                PID:1104
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8816,i,17947994161347382894,8221057187719168549,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8948 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:4584
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8852,i,6985857982287421856,5901302249285959471,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8956 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:1484
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8976,i,2667485429754276242,18302361674561001796,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:2456
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8864,i,10577052456689776992,5091909076170651338,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9024 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:4796
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8984,i,7266711943057900071,8338698855067050562,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9152 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:2536
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8904,i,7430639219772202491,10165950573059073989,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9096 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:1480
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8952,i,17234861934299701393,7530085612273185484,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9144 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:4992
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8960,i,5270601120799386658,2068761553246453529,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9128 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:3304
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=10388,i,10414589980786466948,16302367408507523888,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9848 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:788
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10400,i,16106571982097110983,9572965901788016914,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9836 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:2156
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=10396,i,14443909227124326203,2983631994593023483,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9852 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:2664
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=9864,i,10699561201894408883,15140707712334041114,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9800 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:1684
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10420,i,12020244159772454743,708541696102510005,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9828 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:2864
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=7472,i,10461954998784315726,6477891899523301910,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:424
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=7560,i,3869685488878586772,9826015052137160657,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9464 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:2428
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=7308,i,15662085998210396168,11126509955653388850,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7500 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:3164
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=7388,i,3609447288426752663,10446555270766504217,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9460 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:5800
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=7352,i,215491882388212405,5304667382059161740,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9476 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:2028
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=7340,i,9862251763519305766,17486777942245768170,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:1660
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=7540,i,8074027064423743389,15676513376073985594,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9452 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:2864
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=3888,i,18084830704904004055,349168204877240824,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9588 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:1560
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=7360,i,10024698828660324402,4265494382085695418,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7516 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:2004
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=9420,i,5287400653466026222,14350321651841155221,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8980 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:4532
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=10660,i,14273485150298421441,14990982933912156853,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7488 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:2540
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=7968,i,12301212328534436735,15364722248833676978,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8196 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:5884
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=3732,i,1828347690492875407,7193874032400755932,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10952 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:2260
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8932,i,10768592682313832759,2497202554971366246,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10120 /prefetch:14
                                                                                                                                                    2⤵
                                                                                                                                                      PID:5668
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8980,i,14011118209911022952,776385771750681316,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10148 /prefetch:14
                                                                                                                                                      2⤵
                                                                                                                                                        PID:4704
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10404,i,18183392832732834648,3894236546779085033,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7988 /prefetch:14
                                                                                                                                                        2⤵
                                                                                                                                                          PID:3344
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=8908,i,10603691483061026319,12717973669766322513,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9788 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:5632
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=9800,i,7451634373863633707,8127238326911987627,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10944 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:4196
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=8324,i,8844024203602572271,12062934974171902820,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9616 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:5780
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=7736,i,7978276932505066978,9981058120095914796,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:6020
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=8376,i,1998920329125831701,16589983807552945879,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7880 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:3340
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=9464,i,6430568689642419111,18316972116473697166,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=11196 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:704
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=8368,i,15700325424699093310,5562544836460199403,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8416 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:4252
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=10452,i,11648146235604645464,7390746172162500370,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8848 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:5324
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=9864,i,13536514908324939190,17153220417243258963,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=11052 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:1504
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=10708,i,6556964456293942104,11462650231297565473,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10752 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:1096
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=11040,i,9935668915476038415,11344105446007690126,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8080 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:5832
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=8084,i,837828613074561704,4202447602283833389,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9592 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:3600
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=8816,i,409914019354321521,1978653247827266162,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9312 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:4812
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=9048,i,14598666771482057329,17649233021334816243,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9272 /prefetch:1
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:6292
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7380,i,18291062042126133578,3871866678367598404,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=11144 /prefetch:14
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:6540
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=9704,i,9493324051483402305,2415755578003982260,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10244 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:7116
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=8692,i,18164436658944233355,9125498576201725951,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9120 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:6300
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=11220,i,7741665819537817821,6606393077725996362,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8728 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:6760
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=11216,i,1228410319594052420,4127752903279670119,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7332 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:6676
                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=10440,i,11172642507541297305,11179943826738312330,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10504 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:3680
                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=10472,i,15908056133496215276,7636651929831324063,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:6788
                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=10496,i,379079710806593041,5326201243963552669,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7416 /prefetch:1
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:1300
                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=8176,i,16727519229544632246,6423179131532801188,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9500 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:704
                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=8160,i,13868573689285882633,16320030921239485478,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8220 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:2372
                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=9952,i,563683026961326268,14289927512252489210,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9224 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:3200
                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=1108,i,16246280815805070301,6951554655747269889,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8152 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:4600
                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=10692,i,2020651994142273406,5996106004789806271,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10460 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:4376
                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=10980,i,13196317327104779991,10972885395848690461,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10948 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:5172
                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=6788,i,5183556623723982076,11378406763171446926,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:4840
                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=8876,i,10999353813751346373,9188956366723416693,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:3312
                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=3608,i,2174028301884246768,6232683483154370808,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7976 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:416
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=7080,i,9777120628242268064,16673518923588646388,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:1
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:6636
                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=3604,i,3841899560237394125,9228485391483851210,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8664 /prefetch:1
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:4900
                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=8668,i,12434840035217142734,844547348514531947,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:1
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:2624
                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10988,i,796055609319507175,18093185060966695165,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:14
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:5092
                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=9068,i,9465382639863735139,17998152698230654199,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8336 /prefetch:1
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:6676
                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=5720,i,18234833753201895757,3569185054280791538,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:1
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:1884
                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9264,i,11314375860531257146,6663822241075261574,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:14
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:1196
                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8624,i,493997462492043678,14256660237725319247,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8768 /prefetch:14
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:6932
                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=5956,i,10768317202152363370,14900366403076240082,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:1
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:3068
                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=8376,i,17440482301702024214,9367644403003358695,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8672 /prefetch:1
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:4872
                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=2864,i,2977157182392244657,9355508321472677707,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10464 /prefetch:1
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                              PID:4752
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=5968,i,6421022841432177036,17676793364389614807,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=11072 /prefetch:1
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:1468
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=10028,i,9039960099711682002,18232077403321717634,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8548 /prefetch:1
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:6080
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=8136,i,14343560259725849122,5767742868195110229,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10540 /prefetch:1
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:5084
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=10016,i,16211505908201628507,4247812638015718484,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7272 /prefetch:1
                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                      PID:616
                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=7180,i,12226995939999233337,9595095380440196729,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:1
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:6836
                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=9504,i,2284059481997092368,12544787103653858768,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=1108 /prefetch:1
                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                          PID:4820
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=11004,i,11772430978661344464,14022524693501674147,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=11024 /prefetch:1
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                            PID:6288
                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=7108,i,15522175015146346791,7050181334100880126,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7748 /prefetch:1
                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                              PID:6960
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=3844,i,12153707653735499684,17298934904372070782,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10068 /prefetch:1
                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                PID:1992
                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=5560,i,3570784575627112139,15450367476543102805,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                  PID:5424
                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=2500,i,10146746318294948182,9035278220812538259,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10764 /prefetch:1
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                    PID:4856
                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=11020,i,320743340073017900,7866696411028780175,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:1
                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                      PID:6304
                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=9280,i,13367732893688806854,18236073061195165250,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6984 /prefetch:1
                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                        PID:6000
                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=5936,i,12678698185873459223,17392383776510035983,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10724 /prefetch:1
                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                          PID:5252
                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=7748,i,11376260197745522307,15418660831663796635,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10484 /prefetch:1
                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                            PID:5556
                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=3844,i,17558171885409349712,2205130141892033735,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:1
                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                              PID:4900
                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=8912,i,14934661568714427577,10929090174849457740,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:1
                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                PID:6664
                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=9192,i,16786699459137779634,13127498773488464244,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9504 /prefetch:1
                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                  PID:6788
                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=8920,i,5966154194573832941,15591760378131809620,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10304 /prefetch:1
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                    PID:3000
                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=7152,i,12633642735494283001,17338773775836179720,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8072 /prefetch:1
                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                      PID:6504
                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=10304,i,2891385917541642601,328306666790033172,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7544 /prefetch:1
                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                        PID:4024
                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --always-read-main-dll --metrics-shmem-handle=10836,i,16104870355901217176,6308622722662318139,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:1
                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                          PID:3756
                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=10068,i,398824244742105987,2149931322657401645,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10976 /prefetch:1
                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                            PID:5624
                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6436,i,4710968690372405346,9894221926079137007,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:14
                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                              PID:2376
                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --metrics-shmem-handle=8448,i,14858997584290400413,15017892298658471061,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7112 /prefetch:1
                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                PID:3116
                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=8812,i,1795504973902299388,15488924622836198914,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7964 /prefetch:1
                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                  PID:7148
                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --always-read-main-dll --metrics-shmem-handle=7848,i,17847942621573938606,9313729687969524263,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=11144 /prefetch:1
                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                    PID:5592
                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --always-read-main-dll --metrics-shmem-handle=7812,i,13087589698009164105,732330698788934941,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:1
                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                      PID:6944
                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --always-read-main-dll --metrics-shmem-handle=5288,i,3024485601501191604,1460086241474629640,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:1
                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                        PID:3144
                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --always-read-main-dll --metrics-shmem-handle=10880,i,5848733009181078055,11301192245103738907,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10852 /prefetch:1
                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                          PID:2400
                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --always-read-main-dll --metrics-shmem-handle=9344,i,16900466387855867880,77806276860344973,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                            PID:1104
                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --always-read-main-dll --metrics-shmem-handle=8724,i,12498891950103522629,14149697637845920688,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:1
                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                              PID:5904
                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --always-read-main-dll --metrics-shmem-handle=9604,i,675433963528041425,4065546383179848334,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10256 /prefetch:1
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                PID:4456
                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --always-read-main-dll --metrics-shmem-handle=9412,i,2270703835792142599,6833096404661822292,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10776 /prefetch:1
                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                  PID:3144
                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --always-read-main-dll --metrics-shmem-handle=10896,i,2640202708224880151,15896486915987664693,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9392 /prefetch:1
                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                    PID:1484
                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --always-read-main-dll --metrics-shmem-handle=8680,i,2945354092968744574,5516837099386488617,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10908 /prefetch:1
                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                      PID:3428
                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --always-read-main-dll --metrics-shmem-handle=5480,i,2701206204092001774,10259437095927844660,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7964 /prefetch:1
                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                        PID:4464
                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --always-read-main-dll --metrics-shmem-handle=6956,i,10720684444928885047,328914639498105414,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8428 /prefetch:1
                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                          PID:5040
                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --always-read-main-dll --metrics-shmem-handle=7864,i,6312950189179205907,7871434942511044311,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9504 /prefetch:1
                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                            PID:7100
                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --always-read-main-dll --metrics-shmem-handle=5580,i,11569093604640898668,12026874062045922375,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10468 /prefetch:1
                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                              PID:4752
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --always-read-main-dll --metrics-shmem-handle=8188,i,5898684569368371303,2771640571624102453,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9692 /prefetch:1
                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                PID:6904
                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --always-read-main-dll --metrics-shmem-handle=8668,i,6140956257306250521,1624767933243299491,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7748 /prefetch:1
                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                  PID:6096
                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --always-read-main-dll --metrics-shmem-handle=10680,i,5283463134836932692,18424957102016373583,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9368 /prefetch:1
                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                    PID:2904
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,13953793873130869848,7459781765634296424,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10644 /prefetch:14
                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                      PID:3484
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5668,i,13953793873130869848,7459781765634296424,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10644 /prefetch:14
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                        PID:6520
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6448,i,4110475126873765872,7081265720484919760,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7548 /prefetch:14
                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                          PID:2412
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --always-read-main-dll --metrics-shmem-handle=7700,i,13014016355825082996,10303545849626444351,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8996 /prefetch:1
                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                            PID:5632
                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --always-read-main-dll --metrics-shmem-handle=9748,i,3296093950397629422,4217123400550525590,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7532 /prefetch:1
                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                              PID:5664
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --always-read-main-dll --metrics-shmem-handle=5668,i,14496620145748294713,9456191624706672177,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:1
                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                PID:5496
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --always-read-main-dll --metrics-shmem-handle=8756,i,15934068716764011642,1889452132983594081,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8136 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                  PID:3952
                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --always-read-main-dll --metrics-shmem-handle=8592,i,3070554023167321978,12297013946190208116,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9372 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                    PID:4984
                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --always-read-main-dll --metrics-shmem-handle=8072,i,1750173238202950572,2408490663726496478,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3876 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                      PID:5340
                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,5090447003369926843,850776387610910846,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9600 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                        PID:6748
                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10464,i,3179673761776810177,7671728230163419261,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9340 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                          PID:2400
                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10464,i,3179673761776810177,7671728230163419261,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9340 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                            PID:6948
                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --always-read-main-dll --metrics-shmem-handle=3752,i,729257403926125312,5075074256209575219,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                              PID:5740
                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --always-read-main-dll --metrics-shmem-handle=9340,i,4584092917025035094,7935421694775040262,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10288 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                PID:5780
                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2968,i,15164777845298181050,3883141865338744416,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9440 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:3876
                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9440,i,5659973669093301962,15345382897251770589,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10644 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:712
                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=180 --always-read-main-dll --metrics-shmem-handle=8852,i,11398207895167439928,13580866386744868680,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9376 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:5592
                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10576,i,14828951787745472855,14289541735732104757,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3872 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:476
                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8516,i,17843919523052517276,14740479484501354067,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9292 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:2752
                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9124,i,5021092396876684257,13610472486604300970,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:4516
                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=185 --always-read-main-dll --metrics-shmem-handle=5536,i,3555230264094430051,12738590070893281976,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8832 /prefetch:9
                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:7132
                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=186 --always-read-main-dll --metrics-shmem-handle=4348,i,12610930832145353734,6477631431610965872,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:5880
                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=187 --always-read-main-dll --metrics-shmem-handle=10548,i,567736950002291878,16977505387105913489,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10392 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:4332
                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=188 --always-read-main-dll --metrics-shmem-handle=10884,i,5050523738738287487,14619439815238233522,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8948 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:664
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,9900355011549826412,17667122159219815955,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=1108 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:1532
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,9900355011549826412,17667122159219815955,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=1108 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:6756
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=190 --always-read-main-dll --metrics-shmem-handle=10452,i,17166284703561328280,1040933911793814304,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7808 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:1460
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=191 --always-read-main-dll --metrics-shmem-handle=5804,i,7823114254543823149,17023393240534023865,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9968 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:5300
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=192 --always-read-main-dll --metrics-shmem-handle=11112,i,294395815674641289,16743653852751739666,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:6904
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=193 --always-read-main-dll --metrics-shmem-handle=7532,i,10305100024575076075,874912681004264796,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9532 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:4372
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7864,i,641477931941834825,4034677953186726702,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:6936
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7864,i,641477931941834825,4034677953186726702,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:6492
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=195 --always-read-main-dll --metrics-shmem-handle=9176,i,11613041482800720702,2400245892305306226,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10420 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:6996
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=196 --always-read-main-dll --metrics-shmem-handle=10524,i,6575281790007731113,1286431028688737666,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8680 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:1352
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=197 --always-read-main-dll --metrics-shmem-handle=10708,i,18406074717292658679,7500905260861011093,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8880 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:5780
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=198 --always-read-main-dll --metrics-shmem-handle=6004,i,16284106900959205491,267502444128634316,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8164 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:6080
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8856,i,11198360590945999998,3305282771975426278,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:6916
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=200 --always-read-main-dll --metrics-shmem-handle=8532,i,6640296211683993280,13599726261228822835,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10236 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:472
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=201 --always-read-main-dll --metrics-shmem-handle=7972,i,4834333684609761268,3408486033993494860,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:2164
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=202 --always-read-main-dll --metrics-shmem-handle=5396,i,8094754758646803425,3233079927307358404,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8164 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2428
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=203 --always-read-main-dll --metrics-shmem-handle=6004,i,16105986230311959178,11871904891948675790,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10988 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2204
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3212,i,716301617657816490,16020883199316930871,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6656
                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3212,i,716301617657816490,16020883199316930871,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8264 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:2964
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=205 --always-read-main-dll --metrics-shmem-handle=7296,i,13439722922947392030,14338572131549325295,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9320 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4040
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=206 --always-read-main-dll --metrics-shmem-handle=9744,i,1576960846286882599,18110757740545599993,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3904 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:5952
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=207 --always-read-main-dll --metrics-shmem-handle=5420,i,4890634768351089157,15923611196165329011,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9320 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2416
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=208 --always-read-main-dll --metrics-shmem-handle=5824,i,11221480984325732054,17992042463050581479,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=3980 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6728
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=209 --always-read-main-dll --metrics-shmem-handle=10196,i,2970145747382140532,2613578760319503556,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3476
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=210 --always-read-main-dll --metrics-shmem-handle=9244,i,10629710355804664337,900029260039614002,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7612 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5072
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=211 --always-read-main-dll --metrics-shmem-handle=5972,i,2819939661730673365,3114631582383351277,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=2996 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5672
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=212 --always-read-main-dll --metrics-shmem-handle=8680,i,12533136663081285462,7906369484907838736,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5396
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=213 --always-read-main-dll --metrics-shmem-handle=10424,i,18107100630972093683,135244586307048533,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10336 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4400
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=214 --always-read-main-dll --metrics-shmem-handle=4448,i,13814243499250506539,545329256328120364,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2164
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=215 --always-read-main-dll --metrics-shmem-handle=8500,i,4199250023703110192,2166406703960811359,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8468 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:4756
                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10896,i,6935900455000012105,12817742346667715371,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9476 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:924
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11052,i,456463479827570759,5780842029810723082,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=8616 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3476
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=218 --always-read-main-dll --metrics-shmem-handle=8616,i,11142272853108487545,10062602590981034061,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5340
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\Downloads\MEmu-setup-abroad-956f11cf (1).exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\Downloads\MEmu-setup-abroad-956f11cf (1).exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Reads the TCP/IP host and domain name from the registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4556
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Microvirt\tempDir\Setup.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Microvirt\tempDir\Setup.exe" --insPath "C:\Program Files\Microvirt" -l 2 --channel cd5e1e15 --noCheckMd5 --callbackProcessInfo --callbackExitCode /S
                                                                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Reads the TCP/IP host and domain name from the registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6588
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuUSB
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3600
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuNetFlt
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1540
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuNetLwf
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5832
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuNetAdp
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:2440
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuNetFlt
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1496
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuNetLwf
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4136
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuNetAdp
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3380
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuUSBMon
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4872
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6672
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Windows\system32\sc" query MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3636
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Windows\system32\sc" query MEmuUSBMon
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4220
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Windows\system32\sc" query MEmuNetFlt
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:2260
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Windows\system32\sc" query MEmuNetLwf
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6176
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Windows\system32\sc" query MEmuNetAdp
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6200
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuSVC
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3340
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuSVC
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3204
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Microvirt\tempDir\7za.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Microvirt\tempDir\7za.exe" x -y -aoa "C:\Program Files\Microvirt\tempDir\Setup.7z" "-oC:\Program Files\Microvirt"
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1832
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Microvirt\tempDir\7za.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Microvirt\tempDir\7za.exe" x -y -aoa "C:\Program Files\Microvirt\MEmuHyperv64.7z" "-oC:\Program Files\Microvirt\MEmuHyperv"
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:2772
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5728
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Microvirt\MEmuHyperv\MEmuDrvInst.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Microvirt\MEmuHyperv\MEmuDrvInst.exe" driver install "C:\Program Files\Microvirt\MEmuHyperv\MEmuDrv.inf"
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Drops file in Drivers directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6332
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1504
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\sc start MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7092
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3368
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6320
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\sc start MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3196
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:768
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Microvirt\MEmuHyperv\MEmuManage.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Microvirt\MEmuHyperv\MEmuManage.exe" list runningvms
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1992
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Microvirt\MEmuHyperv\MEmuSVC.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Microvirt\MEmuHyperv\MEmuSVC.exe" /UnregServer
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4732
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Windows\system32\regsvr32" /s /u "C:\Program Files\Microvirt\MEmuHyperv\MEmuC.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6492
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            /s /u "C:\Program Files\Microvirt\MEmuHyperv\MEmuC.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3844
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Windows\system32\regsvr32" /s /u "C:\Program Files\Microvirt\MEmuHyperv\MEmuProxyStub.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5052
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            /s /u "C:\Program Files\Microvirt\MEmuHyperv\MEmuProxyStub.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4824
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Microvirt\MEmuHyperv\MEmuSVC.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Microvirt\MEmuHyperv\MEmuSVC.exe" /RegServer
                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2544
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Windows\system32\regsvr32" /s "C:\Program Files\Microvirt\MEmuHyperv\MEmuC.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3368
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                /s "C:\Program Files\Microvirt\MEmuHyperv\MEmuC.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4020
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Windows\system32\regsvr32" /s "C:\Program Files\Microvirt\MEmuHyperv\MEmuProxyStub.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1572
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    /s "C:\Program Files\Microvirt\MEmuHyperv\MEmuProxyStub.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6772
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\system32\regsvr32" /s "C:\Program Files\Microvirt\MEmuHyperv\x86\MEmuC.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2576
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Windows\system32\regsvr32" /s "C:\Program Files\Microvirt\MEmuHyperv\x86\MEmuProxyStub.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1976
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\System32\sc query MEmuSVC
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6860
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\System32\sc query MEmuSVC
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4836
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\System32\sc query MEmuUSB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4220
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\System32\sc query MEmuNetFlt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4140
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\System32\sc query MEmuNetLwf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7148
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\System32\sc query MEmuNetAdp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:464
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\System32\sc query MEmuNetFlt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7124
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\System32\sc query MEmuNetLwf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\System32\sc query MEmuNetAdp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5284
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\System32\sc query MEmuUSBMon
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Microvirt\MEmuHyperv\MEmuDrvInst.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Microvirt\MEmuHyperv\MEmuDrvInst.exe" driver uninstall "C:\Program Files\Microvirt\MEmuHyperv\MEmuDrv.inf"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3576
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\System32\sc query MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6920
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Microvirt\MEmuHyperv\MEmuSVC.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Microvirt\MEmuHyperv\MEmuSVC.exe" /UnregServer
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:7092
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Windows\system32\regsvr32" /s /u "C:\Program Files\Microvirt\MEmuHyperv\MEmuC.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2796
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                /s /u "C:\Program Files\Microvirt\MEmuHyperv\MEmuC.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:7088
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Windows\system32\regsvr32" /s /u "C:\Program Files\Microvirt\MEmuHyperv\MEmuProxyStub.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4092
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    /s /u "C:\Program Files\Microvirt\MEmuHyperv\MEmuProxyStub.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2992
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\regsvr32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\system32\regsvr32" /s /u "C:\Program Files\Microvirt\MEmuHyperv\x86\MEmuProxyStub.dll"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3380
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Windows\system32\sc" query MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6128
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Windows\system32\sc" query MEmuUSBMon
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2392
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Windows\system32\sc" query MEmuNetFlt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6188
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Windows\system32\sc" query MEmuNetLwf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5644
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Windows\system32\sc" query MEmuNetAdp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3676
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Windows\System32\sc query MEmuDrv
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Launches sc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4680
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11072,i,5699420231012033997,4766918657680397989,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9800 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6868
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11072,i,5699420231012033997,4766918657680397989,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9800 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4032
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,17001188393591989428,16787429247156728525,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10976 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4864
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,17001188393591989428,16787429247156728525,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=10976 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1484
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=221 --always-read-main-dll --metrics-shmem-handle=6740,i,4484325984745438667,4902564577160251621,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9192 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5100
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\Downloads\MEmu-setup-abroad-956f11cf.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\Downloads\MEmu-setup-abroad-956f11cf.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Reads the TCP/IP host and domain name from the registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4872
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\Downloads\MEmu-setup-abroad-956f11cf.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Users\Admin\Downloads\MEmu-setup-abroad-956f11cf.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Reads the TCP/IP host and domain name from the registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3368
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=224 --always-read-main-dll --metrics-shmem-handle=8660,i,6112064375313056395,12405409576339462574,2097152 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=9144 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6244
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8492,i,17699713245945329402,5108790721156946039,524288 --field-trial-handle=2812,i,18023548865096117943,8331997348679428130,262144 --variations-seed-version --mojo-platform-channel-handle=11072 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5884
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5760
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4836
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6224
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Modifies Internet Explorer settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: AddClipboardFormatListener
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6800
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6416
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2860
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6456
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\mmc.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\system32\mmc.exe" "C:\Windows\system32\eventvwr.msc" /s
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5552
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:1660
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7120
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004E8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6616
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5236
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\System32\ShellHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Windows\System32\ShellHost.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1852
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Microvirt\MEmuHyperv\MEmuDrv.sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Microvirt\MEmuHyperv\MEmuDrv.sys"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1548
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Microvirt\MEmuHyperv\MEmuSVC.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Microvirt\MEmuHyperv\MEmuSVC.exe" -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Reads the TCP/IP host and domain name from the registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6768
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Microvirt\MEmuHyperv\MEmuSVC.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Microvirt\MEmuHyperv\MEmuSVC.exe" -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6756
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Windows\explorer.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2692
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\UserAccountControlSettings.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Windows\system32\UserAccountControlSettings.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5824
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4568

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7za.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\7za.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 544KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8cebb25e240db3b6986fcaed6bc0b900fa09dad763a56fb71273529266c5c525
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 09f0e41a45709bd7d012e455df2da75957820488811255b0e0f237ef8e80f53f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 243B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 097fc3c09b901d08392c50130f062f9a3fb50ebba5ef20f43c924dfdcbea4c9a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fb0eec68515688de04d3d4c69f37089500aa1b035cdf0ac4e9cc85e437351844
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 afd252e535cde1f361114695e9eb5f20160ca5346957018d6572aaa7373771c1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0c5e9600b61cd2555064f8437d6d10bd872c6936cbc7b19a083c755f4544b412
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d6eb8f6f4c6ca09a117935a1c7b35051ca1956d3ae9df6b99df40245e37b34b8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 79a161de310349e6cb5bc0aaeee7f600911914bb93a1a84bb5fe8c66897db6c7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8139a03a5211d6f9efa198bbd56bc59078e56e4fa746225677e68d450558db03
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 249B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e02088b996490190a47a2109472c8958065f8b22fefa5a52ed2546ef86e7f30b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 96b4567e13249c72c87a83b7b6aaa15b29f448d28c2dae2f7f7ee61fa9433e29
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 820f17c17f83b088f2fdb1667c56048c3038c2d9978fe6ddfb26893f8a8bdca8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dfd7661f6ba62322b1b7a25d11cd0db9cd548277663e795636bf5357410d37b7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 638105e500f6f5a52e6a6c531eefb7531362bf0ba4357c144e28911385f561b4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bab7bf6cc90ca7ad944deb8b0337ac1da9195000641b98d754388e0bec2ec59e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dfb5f737a72934781557a73e953bd3578a3cbd10c30d1e9a427e49b754c43591
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5dd8ec4e29e66100571b739159418701bb7d93ea7639e2d716e84bcb045d0029
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 224671933bc50a7a4a9b0b3b833d9ccc0d812005063654adc61c4d631c1fec67
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4fb9a27bf4360c5f357d1dc614b3b0aee626c9ac11fa173be4272362e25d2c5d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 089a1f6b77c1223a8afb65a08d14a5b04012784f3cf6212cf9fa93439dfa9886
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ee1d77ede5e8f23648b9e4611e3dd99e99e54f1cb0c8dca6f21bfdf863ac87f6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9caff66675b680f6d964ddf31b29a154c4d5d48754b03384577dce88faa2051d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1de7f80db9b95baab468796deee4cd5bd8dd8f30620988f8495eefa9eeb53fbc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting.jZUKaD

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting.jZUKaD
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 235B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bae766930432121a4ff46a624531811b7ce1f283cad840c87d10a6df3d0f3848
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Setup.exe.setting.lock

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Program Files\Microvirt\tempDir\Setup.exe.setting.lock
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 83B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d9881fd4893489e1b4ce67be08fe7eaf786e1d67ded066b9d979f32719680e7e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        38e3ea29-1605-466d-82c8-3f81a4662ec9.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\38e3ea29-1605-466d-82c8-3f81a4662ec9.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 014107f28cfca60290cda8e26cc28b069c0264c73809ff587ed360e912b770b6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7f279477-bd1b-47b8-90af-069f69c11ec8.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7f279477-bd1b-47b8-90af-069f69c11ec8.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 59a76c01d761499147a2cc158de82c4fba30af2b418ee6dd95c7107bc399ab0f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        LOG.old

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 331B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0fcad6e8585c64e2a51f206c423f8dab25c0f94697ca0dbddcf7ebeab3047c4d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        LOG.old

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 334B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0009d83454bafdd1702a51074e4514bf5a752a41abacfdff28eff7ed78d322ea
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000050

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000052

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 89KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a218285de08751492a8fcce61095152b258328011545dc83d451d453da7b7833
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00005a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 346KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00005c

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 39KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000060

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 520KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a3907fa635cfc3f7acb6bb0fad25c5472f82da30a71bcec0f6b559efbafbc3f1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000062

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 437KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000072

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bed514a326972fc0947503666e200e60295a7aaa789818138ecd4b41c3f359f4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000074

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 579KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5891f0ff4caad63d4f161092252931c8a5e7a5c4de3b964d40b867ee2413bc37
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00009e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 122KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2b1c5573861e48a6d3636f2f285bf897b411d7410003b0e30b760a28da2e61ed
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000b4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 390KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 03ff4df9e2cff9c356d1aee8c1f36f8cba71b9d19850109d932ed1819417ec4f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000bd

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 49KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 96d91e1b346802ea0deab0f45f8e17a19fbfbe33dcde6713c802ec4a92125bad
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000be

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 55KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4a444ada9a952f645b5daea8cdf913bb134550b32cb3a36347ba74bc6f1bcd3f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000c0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 65KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8484ec400a5fadc2d45860dfc4ef6ad7dad4042ba0ce1249262082f750376a8e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000c3

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 387KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7190c86df04db09d4d871532475d84c92a2a30fc0434bdb0e31ebd7fe72e134f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000c8

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 63KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2104b21b4176293d88057a43be3c5f406986524004065bf7927ff08e017e5f1c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000cd

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 53af637172728c232949dd34e75662e970aa4ddeda5bdf0f3cc03c8b573c5208
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000ce

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8a0f996b6c28d951e2c6265292f0ab0b36ce0354cc0839e8ad4c7bcab9fabffe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000cf

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 76KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4f7569895b40896826f316526b8e4b4c55d006e2d3f0fa77fb8380111b110888
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000d0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 084f3a0772a9c502eb750a86f0aecfbab03998dfae2788ab9feada48aaf6c38a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000d1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 67KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d9512d6d5103cc5b977aab9c13bb6477fa7b8c9630ef99eda4debd545c603f57
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000d4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 124KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d447f8a6b28c35f0c71281e31fb89db3c6f0070e0f50d4dfc6bbbd07c8dc5018
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000d6

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 136KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d1b708908ebafc8c922b1ea183bdec5c65beb50fa8df6a53e11f919c22acf12a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000d9

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 212KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8f50a54173184e384cb267826b92ebae0a128cd413996e93e3d9deda0c2b6def
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000da

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 173KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bf14b7ea86621836aa448768a46fb4abdc9fe577e0fd3828e5c8c6fe62ea5ca2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000e0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 170KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 beeff5d634000470f4fca99e98b1df73ab4ae69f60b71d77e4bd533c41e8571f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000e7

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 73KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 49a03740a4e90cc48b80dfd321acedcb4f185737b0db715b9c457e166ec228c1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000e9

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1cae5bad340b07ad22b610e9718e260dc1f7731244d80b17ccca29e5a1c83f31
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000f4

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a926528575f55ef72cea9566255d2b09812d7d7766d1d228434f283579cb8269
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000fe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 206KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4ff64457d834dd17a8872c0586fad09990714fc99ca965fe5cb8acd614fe97c8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0000ff

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ff
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 78KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 22d31bc2ae591382f2445d2b5e976928961b2bb70ae28e3207f761e716717099
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000100

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000100
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7aa4e91b0145c5d2f09d1f55290864cacd7e1a661a0902b6b5851bc1e850fb87
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000101

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000101
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 56KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f7b1421fbb757ed1f73b5609b4e658b50cd1f9f5a679064bc73c4ef4df9972ed
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000102

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000102
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 59KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 85593f2fc51b4fefad47011db0b02371cd5ee1c78796b37756cdb53c5c150104
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000103

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000103
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 64e006e29b797b081fd55052037613695818ff7dd221536402900f7cc380ea01
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000104

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000104
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 45KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f529e8c9aeb497c65559ab91bddb0c5d7debf2ea302ead4a9014063c1722446b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000106

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000106
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 512KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c207f2528ce4320eef9cab5107f01152076a10af5ca27058a137337a25d04f3d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000109

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000109
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 256KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 69c3df0acfa9b94fad710cd600e6d092b54a3848415a3c7b9d178cf9600c58bf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00010a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 256KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00010c

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c626f513876dd0e5692a93e2da8bb75c0708e6e8c1ff2b908ae40409cf7251a5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00010d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c64c67529ad8eb12e8dbaf84ed7b0e6b54083fff315147771a92f7eb2d3ffdad
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00011a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3ef80f1bb1c5dacc3721f2ce3113608504685f62a704c752bf1ccee3c0b3d507
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00012f

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00012f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 454d6e6f37852a28fd5c57a91e8975d8b667b3f7ab98d81f12c4c9ee9035a927
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00016f

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00016f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 135KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7d6f05f313c206a17357ecb7f8c9136cdd182bf2bf8b473cc5dec308c237ef22
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000170

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000170
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3dba08ff5db780f0b435629597aeaba6dfc9c3418e5f53b0b6b88a1913910b51
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00020d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00020d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 92c5c48abe267243201ee3d0e47f3f70d6a6fe69441c34a5511b05e3aa3472ad
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00020e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00020e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 36KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d1490c0c45f51e7c7c693a113d225efe5708b10e72c8750389745157c7b31b74
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000210

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000210
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ce32afee2b43975d2695e4510388cdf0b263a9a7160054cc5877f8585ac6fc8c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000211

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000211
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 86386e999db35a1750190a61cf4258e5be8ad1ff59b702f7de638193fa172d56
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000213

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000213
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 78KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7ad9bbdb9e19fadc098d591d142dffd9a8945cb5b8aee50b89039bb9aa5ef34e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000215

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000215
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 76KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dce6ed47db145d8d73668ff7c6f688666f468076d62c1e83e7a7e0d0376f6d0b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000217

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000217
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 75KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1cd85ab63ccfc9023bc9fcb3a8971ba8f9aaec2441858d2bcc8fa19a150c1f8c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000218

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000218
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 84KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 123b76b2c7cb4e82b08974d9bb2d7aa58d5fad5fc28d9e0f47113f5c1679d9c8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000219

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000219
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 83KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b7dae1bad34ccc429fd3f65b208201adf26ff4342d4549d00f5bfd4c29b6475f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00021a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00021a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 85KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 edf07e11c5c5b8569544e56254df038d24609cbca96551794c4d30605c61f00b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00021b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00021b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d2d1d08c6fcc618d401e34581cc01dc5e427a4ac0b9e3776666bb7f9375808b4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00021c

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00021c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00021d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00021d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 93KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f512faacf075490666f3fa806f820624c1dbf364734ef4a752e45480df52a193
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000220

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000220
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000223

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000223
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 40KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6cfcc3786d5ba3b5c3a41797f95272e57f4290ccbd283a4bfd0033a3d857e64c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000226

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000226
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a91d36c22d4fbe09815ec9ce9d2f8067174e42bccdfb27a38bfb727fac5d84bc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000227

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000227
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 104KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8d8fcd5d6aa51294cca4fe69f328210337f798787f523e2cfbaf0398f8fb9361
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000228

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000228
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 50KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7bfc16ea1b360ed7541069805597b93e36415da2fbdf5e33078f14c9cdfd33d7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000229

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000229
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e748d0101de97d65baed34fbf939786bb43ced07a8098a8bad515afa4a3a4ad3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00022a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00022a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 76KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c5690a9a02aab8ff722b9b9f689a8702364df53ad5564b81976e584ecdd29831
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00022b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00022b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 65KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a5d7edc099547d4afb45931da50efc3d4348e928d79745b42514015e8f23cb3a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00022d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00022d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 81KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6f787a511c2286708912ec94f0a4d15cee1c757768d1237b5702b92745e62622
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000263

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000263
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 132KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 15b174aa8da4d74930f910ab0afd57b5de38dc71f213917853acdff617b062cd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0003c1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0003c1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 40KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 090a0c6298252c219e1f36341373197bc42f627977225d572c94ef447c99c30e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0003d1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0003d1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 26KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 366a4f32cf259cb36900802eb46e61c2f078146465f1419666c31cd2bf1c0b5c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_0003fc

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0003fc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 103KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d8c6ca9fca2ec7be3fec1e89c79cf7815f2693bb731bde4c7bb0cb91144aa42a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00041b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00041b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 68KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 91c9539442ba9346877d4e3af1e8376b6903ddd9ac44263e0cc28d02a9fe1cfa
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00041c

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00041c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 63KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b481e82b01d7619a501759a5ef72a74db1c056e782bd3e2a48f1103d67c1fac4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00043f

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00043f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 266KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fe8ab37efc76d8ee7e97384e1d4fb603d7135784662ea5f8884b3b5aaa8cfbbd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000441

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000441
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1024KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 73645a6a94a927dd4ae813972be79e082f38109e2b535ffb815ccfb0912269b0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00045d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00045d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c811b76785137c789ae1dd0f21ee61c40ee7eb76518b51e3c3fe6a32a606d92f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000494

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000494
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 42KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000524

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000524
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 17dd5d2717c8c85f0d0cf2568819f88bcdef578f3aa3a71fe444b102139c8262
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000525

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000525
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1edce01065c9ef4bb1740566efa82595180f1757e732193421ad170c37621aa2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000526

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000526
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 749f936f436820ab7b9a211d72938b2a96ae5f4906e8deca940ff398203c5516
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000527

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000527
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 39b5f5e55b62e9942030f9e2ac3df385165309a05e87d86e5960e4c3a53b12ac
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000528

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000528
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 79KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0e73beae060c0d04b1abf6921be3bc55bea4eead262548a4f6c052eeb542207a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000529

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000529
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 61KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bb2ad5393bde69c8b1d4c3d2316c6c6dabc03f2e70e33b424d5b9a925984281f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_000549

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000549
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 55KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2b3e50097b78cbba0b290a606468976b2397be5a4ea84b0b87316102a1ad5e2c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00054a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00054a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 50KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c3bb899e57f727589702cd1fe976592a110a71ef20e8b6d55009261d3f86bf60
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00054b

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00054b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 52KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4d5ac229b97d6cd7e634634eb1db9e93965df0cf6437bca54e91d7f3989cc7d5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00054c

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00054c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 65KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f34cd70e8005b3941173b09b58796e745eec06208cfb3393b2745aff29f8b38c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00055e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00055e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 df73e8dbb41e065e23250b2dd69a25cefe7930a10c07fe84f725db05c2428fee
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        f_00058a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00058a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 47KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        0292c59cdc2d5fd0_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0292c59cdc2d5fd0_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 400fd938897a72522748dadd7ee8b8bf8bc3a65034e304d7c9003d16bfe3ceb3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        07b504a23a311f79_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\07b504a23a311f79_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 303B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c55560f7d0616001c05f7c0ff1404dcffd8a79468a177930a38bca8fe512c70a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        22e5778943b9acb8_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\22e5778943b9acb8_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 292B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1e72d0e5138a4cc811b7778fc02588fae021dd7b24c8a418a4d19b51a740202b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        265f5c6c24898962_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\265f5c6c24898962_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cef5e39c1a0ea43cf854e1d5b736661f664b559432fa5e30c023ae2bf033d5c3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        33385a640d3d7f9e_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\33385a640d3d7f9e_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9e8807c7b3effd29d624ea4313788b462a5d44758b25a9a11f1b193cba971a5d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        448975f7932def0e_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\448975f7932def0e_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 96866bb24232190e6ded4f93bf6dad70f38065a1c82a0453871c476cd98298b3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        851139ceee987361_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\851139ceee987361_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 305B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2f866e3871d1b0b5e6868cd63d9a3249fe6aa59e95cd83e6fc39b25cfb6ee430
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        88c5e53988e625d4_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\88c5e53988e625d4_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 58KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 269f90238426f3d281b18bdadd2b89dccdddf5ab6dc8006dbd580725022d8957
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        934573f6830ae113_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\934573f6830ae113_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c21bc8b2a5f19aa86f719f324e4d5bcafe795a1c3d2f08f7d2bcd6ea4ef9f4b7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        a646180c1a675048_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a646180c1a675048_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c8b2830b802167c818cd23879018912586518f5d4b9ba23371e1f011764f3592
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        c7e838528deff0d4_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c7e838528deff0d4_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1876a72338e6ad2827c36d5349e31fdbde88805f44a67982703562c5110808b6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ce2d1b51cef384fc_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ce2d1b51cef384fc_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 267B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8fadecdf27e0d11f9e6e1a2a4be2f618d384495cc7027ae993fdaeb37794e713
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        df9b73e22d9030cb_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df9b73e22d9030cb_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 266B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f6ef46c93cde66335f28abd22a49b2db8c9cd8047701662bbf02e2a15c56c6ef
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        e0d84c713cdfb5e1_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e0d84c713cdfb5e1_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 267B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9f7ee40ebc7db8b2df988bdd2bb76d6daef84f7c1b75d298bbb9228b49ddba24
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        e980c6bcd5d294e7_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e980c6bcd5d294e7_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 256B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0a47d8b5e8d8e6915b648c3150d1ee0d98491761cb60bb3d5d2557a5bede3340
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9fee7b369992f2a6e241458d7b392bbec5f2ece54f1432c82a908db0d8159564
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a3be4a8a23557ef0ad0f6dc06c6784f3f53dcfcca98404108a012003f7da6a54
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d24c3653161c4440fab1c40f59911ffa5e338b268bc33d4e179d6d84eba8665f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4c88bb4f2a7abd43d6f50c005ff162183c1fd6de4c5d4d6277c6eb1709814288
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a58ec068536ccf576a644ca1f1a68d518da5b30bca3f2dd48102c6790c69ab55
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dbb227ca2d0edb74ec0b847dce380b7a2ad96a203bcd520275986b2ffeca8747
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 507614e1d849ec27cf0dd39fbd2e0b82306138eda66bdd1d4885eb3e5be7588b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8299302bf93da0bae41d86be304b477f8d601061e01df6cab606358ca882d1db
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 089eb27aa26c601f337edc354480fd543794c20ff0d348936772b468ea8beb29
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dee4fbc7e31a86c6298dee02a591519013fba10f9cdc48787e3e44315ac130f6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 376d34823eedaf91f7de80107611b03851344adb5f367254e4b641e8e10bbfc2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7a83c9fe3559a46b0e335e551835bb6008cc8ebedf20579ade15e60902a97d90
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index~RFe5e3854.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5e3854.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 475e3086ac6810e9031fb96fc92729f24ed3b5b11a75dd2bf5a15b625959f376
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        rules.fbs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DNR Extension Rules\kiilhncajadbgbmdbdcopdpnmdhlbdle\rules.fbs
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 763B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a928e26fefe6487e054edcc8419f68c5193c37879010e057f7693b8c62158e16
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        rules.fbs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DNR Extension Rules\kiilhncajadbgbmdbdcopdpnmdhlbdle\rules.fbs
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6949bb00364dd67f76940cdd191b4db33be223bdb4be6f0f0480d451a6e3f3ca
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        rules.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DNR Extension Rules\kiilhncajadbgbmdbdcopdpnmdhlbdle\rules.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 221B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 782d38946badd5e3eeed1d48d018fb62df0cc8b4785b8c0257f48a20c5f63bd5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        rules.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DNR Extension Rules\kiilhncajadbgbmdbdcopdpnmdhlbdle\rules.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fa2a2ed67a7e0044d128b1066028eecc5cd232fb306f0e25b0a85d19e7d9f877
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        SiteList-Enterprise.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Edge Profile.ico

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        computed_hashes.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kiilhncajadbgbmdbdcopdpnmdhlbdle\1.1.0_0\_metadata\computed_hashes.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 57b32d3d36830a947a2580b3db730a40d72cfe398291f33811602bf62843ac6c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        000003.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 90ed00e1f213291fb34c20a48f8a7dba9ee61a83b583eff6b8c7c45197dc60fb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        LOG.old

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 345B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 192f0cf4e839857a312afc6b557c4cc41186c6dac7ecae74a9e6ff9f7d110706
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.reddit.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 23B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1a9d7a44-a19b-462f-8487-ab06b9671db6.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1a9d7a44-a19b-462f-8487-ab06b9671db6.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 86KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 680d414342f1a6e5788772e494e02b8660b58fe5871554b4a8846b8945af5c69
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 69f6038772d7519df6cdfce423c5776a9862c954669c976202047330ddd35ac7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 50KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7a68077f51edb23872976f35d8776b994eb22754f2113e76598f69dc562379b3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 82KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 63cff2741cef552e37d13ff45c243f121ec6d9490ef416ba20e924fb2a6d6de3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 28cf124f9e2fa8c310ffcf4dce1667185eeb9264a95e9a922e2076c8cb37284c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 103KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5ce0ebe618904c21e6eb98cedbc5489943fb87c7f1924b6e46ff04401997dbce
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 69KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d1e0a6ef8d24218967b60fa2e44dce3a6c74a845ee9d63cd928276a69a2060c0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 101KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b80b772756fd675546d46a0d094340fcc0e7d5b795ed709273e1209876c7a84f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 97ce23934a5cbe14cc7e5fb7692c4e805f2b1aa3e570aa8d93659ca9e887cb40
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 94KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 feeb62279d765d5385120c2af31ce54d9f0df10757ceb5106c075b2d35d2ecc4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 113KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e0a6172a1d9626b60fa50711bc0edf51bf97cb31bab7a61ba2c6c4b51872dc37
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        SCT Auditing Pending Reports

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Sdch Dictionaries

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 40B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c338dc40ad8e4b558a1a248b8ade6121a198674068ef6bdb654ef163c34fbbdb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4ef2734a87fc3ed3825049bb40c6b3e50e47df5bcc74013707e77acd527d9aa4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 30f6ca4eef1e613299a11b29fd6c160cca1149dc838cd59e6c4324dc267209fd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e568068fd1e8fb4ff5276bb91e04d5edbd15e4a7e7ac7ffb1fedc608137a83a4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 35KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 58cd6a3d5992afe800b02f34dc153378ac74587240ce708f34e62c9d5e73c589
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c694c5f9b6dc783dce4b31d86197f586ae821d173ec796c9cf75f5f8d71b7f2f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 81cb4d02823cfb4ce7797d94ca465a2035efac78d30ff37176199f676a238f63
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ec7a6e07275c9748032dd3062f7763329b09cf63bfa63bf2550cb8d4a1b980d0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f7e70500e290de0dffc4568c2bf105e6e196e1c3687bb67537b26142c46e7a38
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a14cdc3a37a81d6ad20b2203d7b4febf2dff6789cd39418a01ed42d691f695a0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1faff10f7d6a34377fbdc7a76d2da9d32efb9fcad361ef7c5b91f90513fa3c5b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 39KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2a59c004f0aaba4daf239c15576da5d137236ccc5b8f819a2c62518e95de784d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 450d259f1a72736ba8a5ddcad838592db205629ec5b4d6c48b4ee3463816feb7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 29e070676220df676f199f83499e27568e539eb433ed9ae52995e8e9ab211d50
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ee4b73abc0a8edbf11dfb24a1a7855ffd00e1f5d8898efcea28a8436101c9576
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f9a1656014196805e8e93d15bc883dca505ffbb4b356e26318d6da20bf648fa8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 39KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4f06d20806db2064c93343683bee8ed309a2817befc69bb88f12a064dbe24628
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8e45469c268f8f0d6bc27d024bb9aa4f61902d0179b96c86f201688bda9a8997
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 25292f6e8d0867aff22466fcde8795f68000870398899675e810ae3ae40cb7f2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 40KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 10d25e49feaaa6eb0735fbbee6560f0e5d756833437233dc976456c6db998fdc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c2408a038adc7c0189adb6fd0d321512388a5f6c388bebfb62b92ee6fa5027cd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\397e5d81bdb71a423054f3b5524da80fc3c2e3bb\aecb77a0-76df-4067-8ae8-711ae6370d6c\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c2f00b286c7614d6f9d3311306b1e1a6448517564d7e499f6f73c449d7aad6f7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index~RFe616476.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\397e5d81bdb71a423054f3b5524da80fc3c2e3bb\aecb77a0-76df-4067-8ae8-711ae6370d6c\index-dir\the-real-index~RFe616476.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 477427416dfff8fe000b9083c6d2d4fd3014fbfb4b4346990da825921681c6d1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\397e5d81bdb71a423054f3b5524da80fc3c2e3bb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 247B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 df3515e52833836ca17d18891e1f99c6b08b5b8116631b4510ff7696ee22e6b2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        index.txt~RFe6164b4.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\397e5d81bdb71a423054f3b5524da80fc3c2e3bb\index.txt~RFe6164b4.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 251B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c75d35fcc70cde6674cc51f65517d502cc16520fb938e9148411676c8d69dab7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\17e50cf4-d4be-45e3-8d12-b393e857da8b\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bda0a9bc724dd5950391e7950cb4d0250fa5fbd53bf0b5096a54ff57e63be507
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index~RFe5cfc69.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\17e50cf4-d4be-45e3-8d12-b393e857da8b\index-dir\the-real-index~RFe5cfc69.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 56194a0912fdd993ef2b28d26c76d2e423ee226c378aa12c750a14c83ba0f826
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3d2dfbbf-9cdb-47c3-acd5-c5f358c36501\index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 24B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3d2dfbbf-9cdb-47c3-acd5-c5f358c36501\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1320f2846237f3dc1d158e846a4b6099f86a82f6687f0ef0c216af87ab5638c0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index~RFe6ad12e.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3d2dfbbf-9cdb-47c3-acd5-c5f358c36501\index-dir\the-real-index~RFe6ad12e.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3b0a151db9f0a3595e678cc58f460e1c18f42d68c732f9d971883154d735eceb
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ad720378-3157-4ca5-920b-a853e74af7cb\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 254771c0867d09abd3fdc40e9cb365ab440e9d9bbe9fd9558110006c95b94099
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ddc35808-522c-42f4-b661-620994b57666\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 054b84a32b977132bfdc7318e86168ce0c92c57ae345f3d2a3589b1751fc09fa
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e1bf731a-bf62-4ef8-803a-44d956a847d0\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b39d237846bce27a5b4cdaf3d5b82702bb8905aa1e44c9da1d1ed6691878e11a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e1bf731a-bf62-4ef8-803a-44d956a847d0\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0cfc378f6a752312b44ab97ea7411a9a93feae1f0856dd992e32c51f8c3961b0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 624B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f82adf265a798ae9377eb53987d4d3fb1c7bd34a6522db57495aba88dd906a9e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 619B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 43efa704903b34ab8a43f499d2c892fc84ecfa5c68aab064336b1c240d60c036
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 519B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 545156fa2337d6ba0fc11cdcda8596025654c3d0a8c140318911e9b696ed1f03
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 375B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4c02c6203fe2ddc7685507806be8f65c4f01649fc024365ea040551e20c3ef4f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 371B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f1698c17e5c00a9fe6f6951b412cd5220f22342b970eea617fba6c59863f7c73
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c7deaef63ee3761df78e4009d08daf305034a541\7f323d40-3ab3-4588-9223-52293d4bd3da\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8e29bf773575c0fb33e08d536650770737b4ff291dafc9f811fef3baecff78ca
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index~RFe5cf0b1.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c7deaef63ee3761df78e4009d08daf305034a541\7f323d40-3ab3-4588-9223-52293d4bd3da\index-dir\the-real-index~RFe5cf0b1.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9a7a6516bcac1b956170e21eacc31144b5e7d56191a9902c5215531541e54b21
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        index.txt

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c7deaef63ee3761df78e4009d08daf305034a541\index.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 145B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6c761b5adbb9d6bf4dc322366cf69ce1c9b923120c666b8e5b7136784419ae01
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        index.txt~RFe5d3897.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c7deaef63ee3761df78e4009d08daf305034a541\index.txt~RFe5d3897.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 149B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e11b4f7e0e2066f633c7161a8b83914ea8e5a33b2489e07ad45428340483774f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 144B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 440d0aa079ba234763fab4b1b2d344937080683f7f326ff0e21d747479ea7c08
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 168B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5d575ab9a621ff7010cb98d153f07e6597989ecc0b8c6270524cce7f26f6db03
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 120B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c6b9f22c5bc1962abeb7c23422efc818e7640ba7a2b49e76e2fc69042aebb224
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 221080cac6b92b104d2b445d5046ec80216fcfac485c32bcf0da60af3b72d8cd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 192B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1fd63257dcc878dcb6eb131ebbca48026053d6cd679979101efa73c0dc0295af
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        47060abcc3889889_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\47060abcc3889889_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 255KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e956c307ffa9761cc344f9f16cb761331f17f1ad9df8231219970b46030cadc1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5e61a4f1882c97de_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\5e61a4f1882c97de_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1023KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 952bf98d20b89457cdc8a2e72e152d09e0951192bac5797c114036d842950aa6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        70ae25e27bcb0b4e_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\70ae25e27bcb0b4e_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 193KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7b4498c28358be5cdcc4d5a8046d9f85347c3fbff74c268d75305b5a5865dc0c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        c08de0c1c69c4a7c_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\c08de0c1c69c4a7c_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 63KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 19c90ef1ae69a3f1ec0811e78d30021bca33bb2a9c9c48d3db738d79a8c74120
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 120B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 931d562fd8edc6e7aaf444e4f3a7b90365a67f46b548fb80501c060465931499
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 82a1205497914fc1defc29b508cc519d28136c1f8493d6976fab0cdf0d5c2820
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 480B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 06cc3572859efc5819e40ef061721a5a1757c5575ed86a7b2e40c22eb8518d72
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 192B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fdac911dfe7960c83711e775f2fd7aacc5154ce6cea63990a8ac9752c0d07d3a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 432B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5fc7d6355ddf5e6736fe8373ef983568e14088cb7aa38e75f80c9f1538f08dd7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 144B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 63925d999a63b9b0a6f03480296d526fa292542cb0be9757aea9691a22ae71db
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 456B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 01469ccfbbd64555b155e67819975e96e16660d1da3e501d1e600cab6e597ef5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        CURRENT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 16B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 41B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        de77e3de-f253-4b17-8d1c-e3b5f61826b0.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\de77e3de-f253-4b17-8d1c-e3b5f61826b0.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 cba682a03a029d2ba758c9bfea8143d1915640fe9eb81a67ad9b8a2e5659205f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1916c66b-244c-42e6-b56e-1f24f0a3af74.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1916c66b-244c-42e6-b56e-1f24f0a3af74.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2d4b04328a60e72cb7f098d2d7e01cfbb6fd63be65f471492b0a0cf9bc986e9f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0f7b1479837ea7f76080705790ea771cfc0bebd46a68261fc96d48d2a67e5ead
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 01b67d944368356a89abf67f995dfd6c963783d5c7ab34ad072522a85cd946f4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 26b2fa978d93c8dc441f3bafa14befd7f78b8296363dba4b358b8e2b372dde79
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a6353e94b05a3a48f222e2a1b15ee77c4c088bf0cfa3e219720b5608924136cd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 49b41d6f7f8336cb9f81cb3841f7b44b75475d0613bd5440592206564689c481
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9502feafaa94567568d3a760301aeb5f9e9658fb560c1e4cd45044839d01985e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 076f9ebd4d7496cfaf6cabcae21acc7311a5cb7dce666183d44f1dec4ef2a3d3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0de9aaffd75dcd16c98d118ff933c8d7765b5d6b281c5236e2ee9c065de97152
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3516961b1896231e5bf329197447efa63d5f4e224475d5e23e270974e981642e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d2cbb201d9b57392e04f96f3fd11c8e68a325d5cc3b9a58ae634497027c50a76
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 577658b7d275cfe2b4ad82c3136804bf4c9567ca2a8dd01c68a99f9b39266afd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 53165096d556d443dfa16602c343cfe451a86e6c8d92c7f5123fdb6bc9a6cdfe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8207bbd1c61b214b2ecf04f1f089977ad36fc146e75baa416cb1da9b16647c1f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7c2aed2d8eba9db15458a24bea5c3c171897b400b80e4ce09efca78fa0d907ce
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3384d510d0fa465e549fb18c1e370666e051dcdbc33dcd328ff99ab235819c70
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bc91f1013c148b23cf0cc40342983d1fef8995a73acd618626f8076f6e318740
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f9377610e2f7dfff2083b1c3c865618fe7c741a251ecb3386ae94d5b0534f8f0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 af28f45cfd27900029196a8a152d6c40ef44e787eeb285811d77e9aec4bb70ce
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7ad89dd4968c82136ebbb049106310f69df772c01315c031a03fa01c5d71e325
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9cde19672d7456a8f9e9105cf2ed28990b5070eacad70eb4783d2701096b2162
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 166e64e9d177fce8c73c0dee1e90757b8cd7e6df5f8a694718a08ad82a6b5f5d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ba8cd68a7471ccffc20afb02c2ce1e3878070c36041cfacf779a66d41b27ff7c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9cbdfe39c9cb654e2095e20caf37a6f6ad2cfae1732deafc3690fb2ba0674832
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ac680d6cac7e32d701101641263dee34f91dc8655eae66c676e8b25f807a385e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 00b9167241712b01112261979a113ad281381d4bedeb54f11e27b2ef46bd61a2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 54517176b84935f4ae9f1b6d1742c6f91e0157d832754379f1b786f0a07d4283
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d192630e278f0053400c0347336b03e31d06b5340e0bed7ae2e4d99866590521
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 826b5cf1128a949da1f75a6e91e6d64c73047c9ef60811617ce247ffacf41804
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ce0483a86972da5dbdb7fce75220927558a34d68b572ec7d0845e7240fb2b342
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 ea0167652a9765253848bea975f3458a46a938b91718a618c73c9cd48f97e556
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9f448cfaf89af76bbfbd345a0aa50957d7691e586643fa86a559833d2b95a474
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 68e65456fac8aff3b0eb8e0af8d420aa85f20d3a31d607198ff9ab383823f8af
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d5968eea71fe8744d9e14256ee965302a56ee2dbb01e59a10be807b3b4197048
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 06c1368f17fea5b18125c31d6f98f3540833ee082e93033561e3636eb041f519
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6607ee9f83452a5214d7594848b10c7b320077453ffc703f9fa9d2d4532b7b84
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 dca1a47c9ea0b4b05753f88533d85bf283df9b6ea7f4f533cda6aa04082c0c0c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 f4b3b49b3a14bd53334b9c2a53849663de53c3e3ae577e6f51589bbb363eefd9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d152f4429bcf63e4f687e71ea7577b8b256d3c6f70db7e1aaefc585d3d48c686
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0890400b0f6df81a54c2a9d530226df434ea4e78f18ce1b4efac65c6463e4dc2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e43a8931c15f3017e2ef556697ec27d281241d6af6718fa45bf5d83803e8822b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 552bb964d136631e17351c87927fb66fd4ebccb6d3a851f155e83ebfd9e44067
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 21153803709a47c8a924b11344e3fc01d24b8ec77c5773624aecdf6e2efcd2fc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2a072f7cc3e6efe342a05cf289f732217fb5eb0367d0c575466490f8713b02b2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 4ef626c49031c08c7688e1bac9019e7eead8c910ecc7dec745ba01dc4e0d9691
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 c02b3936cc9d9ee6699857933c0fd72858a80ddec94fbacde47470c92712de0c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0993727d8302099b1438f208ae44e0b37f3ae3abf5cc3e27ed7d0b6e073c275e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 15ae2aed6df8c455559587967fc64fad78e34170c6f722e6f1239e6456de6390
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 9dbb70ead0a0abe6ddf4fa7c9f4eeceb40ba7fdc9ba20c3f6982d3dc6f179373
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 feae0fedbc30c516991ddc9d3b201d6fea897fe3091fb25d5e823245e5c2e765
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 069cbe18feb9b824511ecd955cd5aa962406925e545136629001d43f5d15f97f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1f5c729784e7f72f85b342794f3b80a65eac1e9731bd4b720c28db3eacb3a343
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 679c0f238528741d924eccb6ea6f3701783bcf3ca75b2b735bdb649c25cbdbef
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        RevisitationBloomfilter~RFe5a2f7d.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5a2f7d.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 29659d1248a865021811c3e09cfe02b04d99e1dc98ecda8bf270d05e28601a0b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        metadata.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 13B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        MEmuSetup.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microvirt\setup\MEmuSetup.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 518d6768c1c4d0f31c8a00794d710761b3dce756c45ec92dcf4893892fcc253a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        MEmuSetup.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microvirt\setup\MEmuSetup.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fe9074cc1ae13a295eb1404add1fa1ef89e0af5d93f4f775923f81e4c4a5a207
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        opt.css

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3300_317509592\CRX_INSTALL\assets\css\opt.css
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a3bace25c71e0cc2980bd5e164b7796e852dfb642c12867801f5cd87737e12db
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        popup.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3300_317509592\CRX_INSTALL\assets\js\popup.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 129KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 384afc246fddc95786b0979cf641be3cb18f6ba5366096dd1a82c393730fd2e0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b85b8774ad70cb206e59cadf19e378946955a385627671c7c6d4a44b8adb1d00
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 94031382be899e27025d8608455198c1a3cb8c7fc18f79fb773938c29ce00a66
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e3fd946460eb8c7eef374bd65799650398e3424a6476df68072642174cfc8d64
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6d7f30e266c005ad9b1753325b133c16acbacfe253c850944467ef4bd875b579
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 a13c4e287b463a2a25028dc2de61c499ce4c22b16f28c96bc129fef4c15cc617
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 e674c1bf3dcf078c14e8beec5905bf623b45ef68021f89988177d287c010c396
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3f78014bf8733f9a2ee4e835a7dc4e1dd46de1d64b6d80cc2a332c3aa602ea31
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 1a2b12fe40a5e2dc60fc4760f398338dc60c56fd2427e32eeeb1dde8fd3e6eae
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 7cba15e4d9c229d2bfb23a9287c6f87d37451d1fd52207b352756ded6df21c57
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        utorrent_installer.zip.crdownload

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\Downloads\utorrent_installer.zip.crdownload
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 160de264eeff4989368e7b3f1e8459f4ca7028bb7841a695b71eb49e6fa3e918
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/1548-13011-0x0000000140000000-0x0000000140073000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/1976-13122-0x0000000072510000-0x00000000725C9000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/1992-13060-0x00007FFA187B0000-0x00007FFA18873000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2544-13118-0x00007FFA187B0000-0x00007FFA18873000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2576-13121-0x0000000072470000-0x0000000072529000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2992-13182-0x00007FF9DEEA0000-0x00007FF9DEF63000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/2992-13181-0x00007FF9DEEA0000-0x00007FF9DEF63000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/3380-13184-0x0000000071E90000-0x0000000071F49000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/3380-13183-0x0000000071E90000-0x0000000071F49000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/3844-13062-0x00007FFA187B0000-0x00007FFA18873000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4020-13119-0x00007FFA187B0000-0x00007FFA18873000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4732-13061-0x00007FFA187B0000-0x00007FFA18873000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/4824-13117-0x00007FFA187B0000-0x00007FFA18873000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/5552-7267-0x00000000219C0000-0x0000000021EE8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6756-13126-0x00007FFA187B0000-0x00007FFA18873000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6768-13084-0x00007FFA187B0000-0x00007FFA18873000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/6772-13120-0x00007FF9DEEA0000-0x00007FF9DEF63000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/7088-13172-0x00007FFA187B0000-0x00007FFA18873000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        memory/7092-13171-0x00007FFA187B0000-0x00007FFA18873000-memory.dmp