hxxps://www[.]bronco6g[.]com/forum/

Analysis

user interaction
yes
max time kernel
207s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 20:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.bronco6g.com/forum/
Sample260930-yybd9avcmb

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
836	drive.google.com
837	drive.google.com
835	drive.google.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
456	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{065203B8-2900-4DCF-8E89-FF0A935E0D9C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
7880	msedge.exe
7880	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe
1972	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1972 wrote to memory of 2492	1972	msedge.exe	87
PID 1972 wrote to memory of 456	1972	msedge.exe	88
PID 1972 wrote to memory of 1988	1972	msedge.exe	89
PID 1972 wrote to memory of 1988	1972	msedge.exe	89
PID 1972 wrote to memory of 1988	1972	msedge.exe	89
PID 1972 wrote to memory of 4308	1972	msedge.exe	90
PID 1972 wrote to memory of 4308	1972	msedge.exe	90
PID 1972 wrote to memory of 5676	1972	msedge.exe	91
PID 1972 wrote to memory of 5208	1972	msedge.exe	92
PID 1972 wrote to memory of 5676	1972	msedge.exe	91
PID 1972 wrote to memory of 5676	1972	msedge.exe	91
PID 1972 wrote to memory of 5208	1972	msedge.exe	92
PID 1972 wrote to memory of 5208	1972	msedge.exe	92
PID 1972 wrote to memory of 1476	1972	msedge.exe	106
PID 1972 wrote to memory of 1476	1972	msedge.exe	106
PID 1972 wrote to memory of 1476	1972	msedge.exe	106
PID 1972 wrote to memory of 4380	1972	msedge.exe	107
PID 1972 wrote to memory of 4380	1972	msedge.exe	107
PID 1972 wrote to memory of 4380	1972	msedge.exe	107
PID 1972 wrote to memory of 5220	1972	msedge.exe	108
PID 1972 wrote to memory of 5220	1972	msedge.exe	108
PID 1972 wrote to memory of 5220	1972	msedge.exe	108
PID 1972 wrote to memory of 5816	1972	msedge.exe	109
PID 1972 wrote to memory of 5816	1972	msedge.exe	109
PID 1972 wrote to memory of 5816	1972	msedge.exe	109
PID 1972 wrote to memory of 6108	1972	msedge.exe	110
PID 1972 wrote to memory of 6108	1972	msedge.exe	110
PID 1972 wrote to memory of 6108	1972	msedge.exe	110
PID 1972 wrote to memory of 5700	1972	msedge.exe	111
PID 1972 wrote to memory of 5700	1972	msedge.exe	111
PID 1972 wrote to memory of 5700	1972	msedge.exe	111
PID 1972 wrote to memory of 976	1972	msedge.exe	112
PID 1972 wrote to memory of 976	1972	msedge.exe	112
PID 1972 wrote to memory of 976	1972	msedge.exe	112
PID 1972 wrote to memory of 3460	1972	msedge.exe	113
PID 1972 wrote to memory of 3460	1972	msedge.exe	113
PID 1972 wrote to memory of 3460	1972	msedge.exe	113
PID 1972 wrote to memory of 1708	1972	msedge.exe	114
PID 1972 wrote to memory of 1708	1972	msedge.exe	114
PID 1972 wrote to memory of 1708	1972	msedge.exe	114
PID 1972 wrote to memory of 756	1972	msedge.exe	115
PID 1972 wrote to memory of 756	1972	msedge.exe	115
PID 1972 wrote to memory of 756	1972	msedge.exe	115
PID 1972 wrote to memory of 3676	1972	msedge.exe	116
PID 1972 wrote to memory of 3676	1972	msedge.exe	116
PID 1972 wrote to memory of 3676	1972	msedge.exe	116
PID 1972 wrote to memory of 2740	1972	msedge.exe	121
PID 1972 wrote to memory of 2740	1972	msedge.exe	121
PID 1972 wrote to memory of 2740	1972	msedge.exe	121
PID 1972 wrote to memory of 5520	1972	msedge.exe	122
PID 1972 wrote to memory of 5520	1972	msedge.exe	122
PID 1972 wrote to memory of 5520	1972	msedge.exe	122
PID 1972 wrote to memory of 4764	1972	msedge.exe	123
PID 1972 wrote to memory of 4764	1972	msedge.exe	123
PID 1972 wrote to memory of 4764	1972	msedge.exe	123
PID 1972 wrote to memory of 5604	1972	msedge.exe	124
PID 1972 wrote to memory of 5604	1972	msedge.exe	124
PID 1972 wrote to memory of 5604	1972	msedge.exe	124
PID 1972 wrote to memory of 5724	1972	msedge.exe	125
PID 1972 wrote to memory of 5724	1972	msedge.exe	125
PID 1972 wrote to memory of 5724	1972	msedge.exe	125
PID 1972 wrote to memory of 3820	1972	msedge.exe	126
PID 1972 wrote to memory of 3820	1972	msedge.exe	126
PID 1972 wrote to memory of 1632	1972	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.bronco6g.com/forum/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffa597ec188,0x7ffa597ec194,0x7ffa597ec1a0
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,4077123067457120075,3846537553130827153,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - System Time Discovery
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,14910583105405516986,1958426592083462597,262144 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,11202336253954025336,5434348204360959312,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,10893802813508645684,3602523892521233529,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,2792623978567013747,3049601851512432473,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5324,i,11540626809971748732,12949376433277452555,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5440,i,6514607812511365870,6356389424483780896,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5352,i,8284043192125253939,680711819699069883,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5356,i,1923465761372790020,6030061516918509200,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:1
  2⤵
  PID:5816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5888,i,12022243369974259487,9119565153837464339,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5952,i,4660567281645308055,8721645973416700117,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6192,i,4428237289750330227,2419824433693018071,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6344,i,11900389639191601843,9161237195549771868,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6512,i,7145569202760814112,8819258267760672382,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6564,i,17344997711301052431,3318151403142505972,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6516,i,14204503779930850534,16139759374042453877,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7796,i,3546385346255940898,6732163194826072267,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7972,i,13708654670885887787,6890535625367433489,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:1
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=8148,i,1526245595279516719,7163339305133547745,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8076 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=8268,i,3550082485829592291,3007366128312318369,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8272 /prefetch:1
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=8288,i,11089241534742720485,3494771913573903887,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8456 /prefetch:1
  2⤵
  PID:5724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8588,i,10495000688202846254,12419795638244473136,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=8624,i,5488017683271769792,6440059181141879914,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8108 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=8764,i,16867275378126861799,17476221719815693674,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8592 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=8944,i,1611977889518822688,13540726118486498086,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8916 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8980,i,11874384757451665994,14087001923161508602,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8896 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=9128,i,5505660692781417090,3372700183819276911,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9108 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=9276,i,3746021895795503241,7073720536219031128,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9280 /prefetch:1
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=9408,i,15619366871279283111,3563922256367876856,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9392 /prefetch:1
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=9640,i,5516598259817367957,1308126549722591056,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9628 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=9748,i,15188714827211105405,8507079540016678114,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9732 /prefetch:1
  2⤵
  PID:5452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=9888,i,16653406153691404918,2966449894005503525,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9928 /prefetch:1
  2⤵
  PID:6156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8960,i,9909432415520879845,12062709866362533581,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=10080 /prefetch:1
  2⤵
  PID:6212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=10212,i,16295841928914609667,1854244584945628539,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=10220 /prefetch:1
  2⤵
  PID:6220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=10504,i,17460074425614437510,11547716995747965434,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=10516 /prefetch:1
  2⤵
  PID:6328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=10668,i,1508705079824095764,10344020068089669071,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=10268 /prefetch:1
  2⤵
  PID:6388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9424,i,10302679595597339070,10161260274734400641,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=10800 /prefetch:1
  2⤵
  PID:6452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=10820,i,4852128203631116054,69877606624912557,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=10932 /prefetch:1
  2⤵
  PID:6492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=10380,i,9393453920486263308,4835894621517980299,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9320 /prefetch:1
  2⤵
  PID:6584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=11092,i,12027832419705380425,7323656095421077524,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9552 /prefetch:1
  2⤵
  PID:6600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=11328,i,16967439223239783234,9042271710016100846,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=11344 /prefetch:1
  2⤵
  PID:6712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8932,i,8589761551994251343,8903617646765679732,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=11468 /prefetch:1
  2⤵
  PID:6772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=10436,i,3806295761310759256,12135003519687421976,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=11604 /prefetch:1
  2⤵
  PID:6836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=11464,i,7770124246936891306,14767344129948064808,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=11728 /prefetch:1
  2⤵
  PID:6844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=11932,i,1028411434470573228,15674036183471765111,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=11880 /prefetch:1
  2⤵
  PID:6952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=11920,i,7385120238871156079,14788496101305863461,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=12084 /prefetch:1
  2⤵
  PID:6960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10740,i,8895505584559945476,3988446507555955579,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=11380 /prefetch:1
  2⤵
  PID:7096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=11328,i,5068579408979546505,4876757195294512429,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=11444 /prefetch:1
  2⤵
  PID:6660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=12040,i,3355771135311869899,688814166431794802,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=12020 /prefetch:1
  2⤵
  PID:7276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=10832,i,12871724551513394275,11942820638733686249,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9884 /prefetch:1
  2⤵
  PID:7288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11248,i,6326258260150845300,18203219529944705044,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=11244 /prefetch:8
  2⤵
  PID:7432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11224,i,6017046673589683741,9604686720039745030,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=11252 /prefetch:8
  2⤵
  PID:7440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9780,i,2821237019362343736,7214409067532610660,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9112 /prefetch:8
  2⤵
  PID:7600
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9780,i,2821237019362343736,7214409067532610660,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9112 /prefetch:8
  2⤵
  PID:7628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7660,i,2000708357348808819,12144412838606261249,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9256 /prefetch:8
  2⤵
  PID:7992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7656,i,12847770064521612883,18358539948814276109,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8596 /prefetch:8
  2⤵
  PID:8000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7648,i,5511935340237911749,9803557827622008499,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=10568 /prefetch:8
  2⤵
  PID:8008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=12056,i,6880190885101796280,9106366297954850678,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:1
  2⤵
  PID:6900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=7636,i,1833255234860037534,18260852600512642519,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=10480 /prefetch:1
  2⤵
  PID:7604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10636,i,5868115449905885769,5683256685602369199,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=12432 /prefetch:1
  2⤵
  PID:7952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=7744,i,4841385228759682847,9719584935563017402,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=7764 /prefetch:1
  2⤵
  PID:8108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=10584,i,6533881158713707947,955072409203180891,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=10672 /prefetch:1
  2⤵
  PID:8036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=9484,i,11963369798414109882,2765993337407460205,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9480 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=7500,i,11511360509071566549,73976795795015775,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=9068 /prefetch:1
  2⤵
  PID:6200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=12440,i,1152693351736689859,3610177671821854250,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=7392 /prefetch:1
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=12496,i,15264257373613707577,13436184902171823350,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=12456 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=12628,i,15553521965817904648,16682472868356684913,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=7220 /prefetch:1
  2⤵
  PID:7220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=12616,i,14684264710050058398,7586128143493328955,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:7976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=5712,i,16821821878404280948,13713220465660682825,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=12680 /prefetch:1
  2⤵
  PID:6240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=12732,i,6980415602999666917,13504891813452518498,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=12792,i,2012218923701787440,16370477391736850077,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8924 /prefetch:1
  2⤵
  PID:7632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=12848,i,16713137735788006832,6357569740611664570,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=12868 /prefetch:1
  2⤵
  PID:6848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=12460,i,10794424608731542534,5351200044113919721,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=13036 /prefetch:1
  2⤵
  PID:6976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=13180,i,2393472430022248834,15799741275683415348,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:1
  2⤵
  PID:6288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=5252,i,11997608981109872291,5968374272964261604,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=12984 /prefetch:1
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=13424,i,7852758316263786230,16502064481989288965,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8916 /prefetch:8
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=12648,i,11542651941434979177,12908923122834306254,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=13568 /prefetch:1
  2⤵
  PID:7072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=760,i,17689428017499844815,14417050457709368239,2097152 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=10336 /prefetch:1
  2⤵
  PID:6536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=8064,i,11198182468488822026,5619558008635288470,262144 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:7880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11204,i,2157870203360289937,5912749617705282060,524288 --field-trial-handle=2272,i,11058543316525415656,6482379085972915470,262144 --variations-seed-version --mojo-platform-channel-handle=11872 /prefetch:8
  2⤵
  PID:8100

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5760

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 b7941fc2186dd8f3067cb3ea961f6eaf518fc6e6dd742ab32c52e3e345da0a59
MD5 f7a32922ef266cb4585199b728b95042
SHA1 a92c59c9d7b235b8ab2e806d8f7cab891ce7edfb
SHA512 2ec6915574b006e5974b169f3b5b9b05196f7865100a87a8cefbb20ed7001bfab90cdabccfc33973bc6edef571b71f85979a15381dee9fb395a506a19547d8fb
TLSH
T1A1F0F4A5C821AC3B0CFD1B3920A40B46F754232B2A81984F3B3E810D8FB053B468996C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 17f1ddeecb287847fb9bda147e842a2fa9a437f863fc1a9e3d353c9835b90c20
MD5 a76d02148b595bdaec257e3ac4b25041
SHA1 81825e6e519ec8d5ad1f1df6e713c892076de806
SHA512 348836164576e7b53fa7f19b92f6d5981b7f4ceb03a453cd3fb91eab1f10ae1a9f04ab5b7b8b14cbe211a6515fce19b83033e0af97a44f8af15e0d41a6c1cd41
SSDEEP 96:RiIyO2y+vpTQgWwsKFZkoTOHH4e2IiC8VpMvlGWA+yNQl+9eU:UIy1fvpTNWw1ZkcR4iCOpMvGR2l+9f
TLSH
T193B15E9595903168FBD89533D4F617B33174E38E38870E1AF4A8D2B67C67380A06427C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 9ea4413670134203aced4df6998b38a78ae22b71f35b3e3291adb76c606a7053
MD5 ac1d4a4783641fb89a03c03e10584390
SHA1 20bfcb622228db004e2ea20cbfda48c608467066
SHA512 60cbebdf0645208c073965fcdf26ad1d107f466e5159d027323d90317a173bc07f0140945ecae4073d700b9eb204e5983da4be49d34a55cc8c33699aa7d9745a
SSDEEP 96:WjiIyOUy+dp+gWwsKFZk41HB4e2IGC8VpMvlGWA+yNQl+9eZ:WeIyPfdpbWw1Zk484GCOpMvGR2l+9a
TLSH
T144B13E849AA03568FBD99133D5F51BB33174E38E28870E1AF4A8D2B67CA73D4B05427C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b405a00241ae518430fa513e804c57d05dadb7b212b2ee4c940965ae9904bf63
MD5 9b6c138697218436cf69d15f44c5cc02
SHA1 72b5cf1d727cf46fcf91344d98aa087b2d89b61b
SHA512 83ce9e4c31bf88be40bd2fb4fc1e9e8cf2b5e62f0902a036fda06e0512e0f54f1d346dcee2f150d58141fdd573d715aa5e60d16061d82a6d6583bc5ff33b2cfb
TLSH
T182318EF3C3E4C66E8A0096F0A618BE2BDE2D0554432C3D9AC9E4AF2BD3E3471D14165B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 46KB
SHA256 f74ea434211b017904ef690c34310c1df8429b6c9c1d0fd6d544855e59af962a
MD5 dab9ba8733f7b04fe04162dcc9945704
SHA1 49b9668d3f510783a2e039f02260e96aaf856601
SHA512 9211b6d684fab633cd3113fb589282c3984c7dc889a9dadccee106769ea42c36faf715eaf72a89c1dca426afc731a43f4d098ff42c0c2e5a88b7b9ed85ed1788
SSDEEP 768:xb/gJlPFQeLJ1bMwPW9N9lD703yJ6Kzqekgm:clPFQeLJ1bMwPW9PlDNw
TLSH
T1112387B783F4A96DAC3165F06B162E1ECE5E0C14972C3D6F85E45E5FA3E6020E181A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ce4043574da71be16df3e9760945fbc211a657edb8093bf889cd5aa97acc8db1
MD5 d8dc7167f8c7447e3a39d69b2cd15b73
SHA1 37f48f2d898c60af824cc9143c152af54f0a868a
SHA512 ebae0aeeddc837448afa32eb768f7ff4d7c26dc154cf337c51c7c76d2e4ceffb1b00e4b7f567ff17cab1b1a96ed4f8e47c9ffc0d2b7fb3ce3d94aa51fcbe68ba
TLSH
T1FC318EF3C3E4C66E8A0096F0A618BE2BDE2D0554432C3D9AC9E4AF2BD3E3471D14165B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6f04b647cf68ef0c3b38239944aa97445e99c848554fcc35845015e52410d469
MD5 ce003bad0d873fb9215acdd9b2e0435a
SHA1 36b0bee10db84c2f372c946dbedcf33e6ac08331
SHA512 4821d07ec87d594212ea091c72f59e6229751677070bb616c397555271c74f1a3383570168b4468cf70a762b72329d87f79c40801c53450ecfc5d2197f07bfce
SSDEEP 192:sxZ4R7kZ/fcs8NaQZLm8DzodpO0HW6+WNcS2Oc/Yop72S9+cIgjtxJ:sxZ4aZ/fcstOpYHHbjlc/nyS9xjt7
TLSH
T13942E7156D38A97B8CC7D219FA55BF53E3F9103390911E48AAFC8A1C15E7ADD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fa3a15105786bd70b1fc68d047c0cf92eaf1387753a1f7680911cdd3b774167f
MD5 64980eda720c24b48d825d0a22d78d84
SHA1 b2907da46011a62f700e606f5772fbdd21ea981a
SHA512 b6be2e6a3e8baf65b49cb67ee6b3cde46c760f450574447744c14bdd254b5e8942afb05efd8f694887332e9f685bcbe23cfd2ae8225cd0ad558e1d554743a342
SSDEEP 192:sxZ4R7kZ/fcsg6NaQZLm8DzodpO0HW6+WNcS2Oc/Yop72S9+cIg5vtxJ:sxZ4aZ/fcsoOpYHHbjlc/nyS9x1t7
TLSH
T17742E7166D38A97B8CC7D219FA55BF53E3F9103290911E48AAFC8A1C15E76DD620380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 bdb7ed9b435e99354fc3bbe71af377b5db4cfad44fc43ff86864f7992c30ed97
MD5 53c8bf46ee18e42ce86a076e352765ba
SHA1 8acaea11f09c13d6eb048413962ef6ef67a6a8c2
SHA512 af2233f65e0f6fd64d513ddb49c12035b647791888a0c13fda8f8d88bde5664c187423374a5fb1ccad2bb35c3f4a2e12ffa734ac4682b7995a879a9671ce2634
SSDEEP 192:sxZ4R7kZ/fcsg6jQZLm8DzodpO0HW6+WNcf8dYoC8S9+cIg5vtxJ:sxZ4aZ/fcs7OpYHHb/dNS9x1t7
TLSH
T1F242E7156E38A97B8CC7D619BB55BF53E2F9003290911E88AAFC8A1C15E76DD620780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 1ded177db8190967b4530d2813844b4a77ae5a7f4672d10a44aac4a84451070c
MD5 06126dd016231a749beddf3a2af79a70
SHA1 9a31b5100b07868a1c050eb5963166237c1f8a1e
SHA512 b71b2f550179d397c51f43eeeb86a4e2a5e3b664c167c6313df03096135a0b98344a160681f261642bc95ef1bdd63fdcf8a259ecfde3ed6fdfc8741441fde172
SSDEEP 768:Px6r8j+Wviy8K8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYrooWYbgno2:Px6r8j+Wviy8Ku1jaqpLd4jjoWgg/
TLSH
T1ADC2E93B740CCB7E5FC41A9DDC5A6F972DA802C796588D408BFA944C02C77EA912B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 cd2a0f0c3969038876b018e870a18eb110f3e78f16ce01d09021e9fea1876ba9
MD5 3d5f9bad7400aa744c5a437b644b7c37
SHA1 d625e146f2564cf7dfea4a46962e2955a8859282
SHA512 fece8f31a6dbc6c9d624f4e05afefe7d0dfa464a2eae17b360e469a31294fcbeafc8e20ce3ac924d223c9c343b86527acdf3d2480fa8970c389583a59425ebe4
TLSH
T1DCA002568383300BC05802F1758182593210DF91A611566291E150DDDD50240625514A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a0da.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59a0da.TMP
Size 48B
SHA256 b65a74e5577ff5cc884f237e82047faea783e4f4af0ebf198249c810447fe027
MD5 ff3649581c97df425dd3331aec0a5493
SHA1 bc4b631cc3bac954b199c95bdcb0446ede3e9f98
SHA512 c28306016458282c51c1b818910d5e4e386dde3696ebe21a6f7bf0f04b1e314a774a15c5cfcf861b691a0fdfff5792947258eec6fb106940202d27f8aed83914
MD5 SHA1 SHA512

Submit Download

3870d65c2542a2c7_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\3870d65c2542a2c7_0
Size 63KB
SHA256 43f16b9aaac4ede978944e5c0d5996bbe94148bd709870f36c22cbac923fa218
MD5 37cf566470b905c9d8c1cd9f6e4587da
SHA1 66cd010503eb64267250528c541933c9074c3995
SHA512 c0dcfc42cad3fff99541a8d0f2a901980dc326533ed44fb87ff3b7882cefc310e31f3d77da8bcf8548f2908fa772c2ad10a2d6ca7a770fd06ee11f3337ab052a
SSDEEP 1536:zSu5XhviJCQOyxxfS8fZ6YXkkN2oCiyOIIV353i4Rm9F:15hYOluUY0kCiyOL
TLSH
T1FA535BD97371B4B3437BA0F1606F120B713AE5A7B004C4A4B198EDE15E54B9A427BFAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 4a0a396b8ca1d4cd502ae77a839680f80abe72f945eff2f2c89bd485b5894a67
MD5 480972cf4cd29d5afaf9466af9105fd0
SHA1 84215d1a5097cde84636cc818a8fdc6c639908df
SHA512 4b55d54cd8d5acf3a5819d9bc6814fd12498b9fbf1aa925a6ab7e2c34129aa777e08cfa7c26eb11cf4d36e0a72ca437416408486b8e1b8649d802b8bef8a746b
TLSH
T196A002509B805029C4420E7215C113462352CD148105178B91B40445DC559D14D4546D
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 4ebad0006af87dd83d50aeb06b14a9004482f9672b94a4133bf34633a8e4008d
MD5 7ed77580bfdcde83094a0602f15a09b1
SHA1 79d96f0a9b39410e36aff6d2a93ca19c6da6460c
SHA512 ce921ad5d4188ca18de98d667d5a480dbfe400aa4a99a82967648d5bcb20db8fd5fa49bcf6d4b272a6e5f60bbb2c53a7b6e4ac889f336fe9f57ef650fa1a4a2d
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgv:ST/2dXOJhJlpfnpp3tNXVrN3ojDAxBP
TLSH
T1C0C2215571BB421039FE295C92B58B2E064231B33119E67B7FBD00A68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 152B
SHA256 a7dae2f29540a3ff03344e9a0d773ce29b0379127fced49697200749c38179ae
MD5 8c4a14fc3586d4eb7358aecb7abe1464
SHA1 cfa5176c4b09d3cb02844ebce1bc88637706d639
SHA512 6f1904e0189a39ee57c8152dabc7cc6cd4bef905b5b90cc73d4c2cd57da31497696610d7a61dc3f5ff2990a12b15af84148020b030df4dd3542fd354d121f558
TLSH
T147C02BE3002A42CF4F34AED921383A0DE00F834F4CC0CCF0804465453034B275403E78
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a423a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5a423a.TMP
Size 159B
SHA256 c32ac524afa9b43d8ec45f5ce030f03245c83c968262cc3e74d4af61ee8a5c58
MD5 8e32894b9627828ba12d3e0c9ec20656
SHA1 8b27b480b9c2e3cfad0be2f8eae4c5a1ce960795
SHA512 50b168c5642d940cf7ef5e3d045f421e9b6aa9d3ed61a9befe664b1f07dff9720d78eb7ea332e992ea63ab886b7396c81cca35850892030bf3b24500605b0dad
TLSH
T1EBC02BE3013A02CF4F3069D521343A0CE00B8E4F4CC0CCF0804A75053034B278403E38
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 50144bd21af161d2e6e4909e1928f647e62f1ff44979f20d49b1debfd35a90de
MD5 872905bba2512d25a4e7228c7926027e
SHA1 5d6a9d8350d83701e035e0d03ed93017ac76cfbd
SHA512 09ed0fc5ce3712e0b320f70f9391f6d0d0ad02e59da4ac1a5235695e3cc1039f1451cab885f06e8ebc579b0c49e5e496982512bb6c8f4b11b867ca9c9deede82
SSDEEP 384:nYiFiZcI63sNT8TUNTUlI44aKM4RBf9wzWf/BChxMJXYIuri1GXagL/7IztoZ:jFQ63Gwgms5A4BChxMJXYIoi1GX+u
TLSH
T192C23B72EC99DAB7ECEA8FD5A74A3603DEE04123D58C9AC4D9D91D1D00971DE430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 2f28902ec30f4c5be1c705c4b0c676d809e55d5d31f22d111e168cbcda9a592f
MD5 eec003a30644d0e24c91bbe44be78d88
SHA1 6ec53036f991cd0fd264ce31efe93a743d868b54
SHA512 879347b1cf65baa4934b83340fc111b1e9fcde6b7f575718e7a06b511b429a052b076f00e64eef89dbbea41428c36827f7a5fcf81024cdec91b599c00693cd21
SSDEEP 384:n6iFiZcI63sNo8TUNTUlIm2aKMic4wzWf/BChxMJXY5FWsa+VY8gL/7Izno6:xFQ639wgcdH4BChxMJXY5FWhgRR
TLSH
T126C24A36EC98CABBE8FB8FD5AB4A7603DEE41163949C5AC4DAD81D1D009719D1307C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ff9458bfdb1e4d789068d025faa7c94c5b8163aa632927a71a637ecce6122ea8
MD5 47af950ab322e8bb0a11e271710eed6f
SHA1 6a3e52092ffcb5aedf1237a79802ec29741f1cae
SHA512 d74aa23e3630be96325dbd26d914a21f9dfb0991b8c7b53ce766fddc5d89378f1ef5c3c32769dd58f664b45ba045a015e272eaf1df97201c3985a41f7b9c4271
SSDEEP 384:nHiFiZcIP3sNT8TUNTUlI49aKM4RBf9wzWf/BChxMJXYIuri1GtgOIwZOy1sgL/t:CFQP3GwgPs5A4BChxMJXYIoi1GXsI9
TLSH
T1E9C24B32E8A9CAB7ECEB4FD5B74A3603DEE04163D59C9AC4D9D91D1D009719E430BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 a3b6f619f2c6f6374666f5479f9c722f190f07346547e80587d5775e6c00e4df
MD5 2a84f45b787f3dcbc02d30183c21733e
SHA1 0227b905e4a3c5e374c0428b7c96914258e556b0
SHA512 b210d2913f0d6133e67dbd95ec70ba21b83e58083ef7147b2043c741ec1f26467521e2a333c6f3761caffc0a9c4dfde395838dda27bc880643353bea9d88ce9c
SSDEEP 384:ntiFiZcIAd3sNT8TUNTUlI49aKMKRBf9wzWf/BChxMJXYIuSs1GtgOIwZOy1sgLF:kFQM3GwgPK5A4BChxMJXYIfs1GXsI9
TLSH
T1E7C24B32E8A9CAB7ECEB8FD5B74A3603DEE04123D59C9AC4D9D91D1D009719E530BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 83c49ca3c53e7022ee29cc62d46f05985773d5f394597b8672a883814b3cc883
MD5 a86d06f1336055ac92253dde9a0d32f0
SHA1 e9b0be8f59e613d1936a57966066c73c90f4f110
SHA512 9dd79ddd3fa0622ce930ba40e2fb4eaf04cbf4a9425d970636e5e7ddbc8d9b521bf9a77b61b0b01277e530155544a4a03ddae28244350ba9e4d7089391633fd5
TLSH
T176413D58A7EA1148B377BF169BF6B86D447FBD772E06D05D10110D4E0A67B44C8A1B33
MD5 SHA1 SHA512 TLSH

Submit Download