hxxps://omb[.]report/icr/202111-0938-002?utm_source=chatgpt[.]com

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 14:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://omb.report/icr/202111-0938-002?utm_source=chatgpt.com
Sample261002-rcm3lassh1

Score

4^/10

discovery phishing

Malware Config

Signatures

Detected phishing page 1 IoCs

Hiding page source

phishing

flow	pid	Process
877	2488	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2488	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{92E26ABB-998F-4BA7-888A-201463079D82}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6764	msedge.exe
6764	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 52 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe
2676	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2676 wrote to memory of 1948	2676	msedge.exe	87
PID 2676 wrote to memory of 2488	2676	msedge.exe	88
PID 2676 wrote to memory of 5048	2676	msedge.exe	89
PID 2676 wrote to memory of 5048	2676	msedge.exe	89
PID 2676 wrote to memory of 5048	2676	msedge.exe	89
PID 2676 wrote to memory of 3064	2676	msedge.exe	90
PID 2676 wrote to memory of 3064	2676	msedge.exe	90
PID 2676 wrote to memory of 2912	2676	msedge.exe	92
PID 2676 wrote to memory of 2912	2676	msedge.exe	92
PID 2676 wrote to memory of 2196	2676	msedge.exe	93
PID 2676 wrote to memory of 2912	2676	msedge.exe	92
PID 2676 wrote to memory of 2196	2676	msedge.exe	93
PID 2676 wrote to memory of 2196	2676	msedge.exe	93
PID 2676 wrote to memory of 3956	2676	msedge.exe	94
PID 2676 wrote to memory of 3956	2676	msedge.exe	94
PID 2676 wrote to memory of 2156	2676	msedge.exe	95
PID 2676 wrote to memory of 3956	2676	msedge.exe	94
PID 2676 wrote to memory of 2156	2676	msedge.exe	95
PID 2676 wrote to memory of 2156	2676	msedge.exe	95
PID 2676 wrote to memory of 3248	2676	msedge.exe	100
PID 2676 wrote to memory of 1880	2676	msedge.exe	101
PID 2676 wrote to memory of 3248	2676	msedge.exe	100
PID 2676 wrote to memory of 1880	2676	msedge.exe	101
PID 2676 wrote to memory of 3832	2676	msedge.exe	103
PID 2676 wrote to memory of 552	2676	msedge.exe	106
PID 2676 wrote to memory of 552	2676	msedge.exe	106
PID 2676 wrote to memory of 552	2676	msedge.exe	106
PID 2676 wrote to memory of 1520	2676	msedge.exe	107
PID 2676 wrote to memory of 1520	2676	msedge.exe	107
PID 2676 wrote to memory of 1520	2676	msedge.exe	107
PID 2676 wrote to memory of 828	2676	msedge.exe	108
PID 2676 wrote to memory of 828	2676	msedge.exe	108
PID 2676 wrote to memory of 828	2676	msedge.exe	108
PID 2676 wrote to memory of 2264	2676	msedge.exe	109
PID 2676 wrote to memory of 2264	2676	msedge.exe	109
PID 2676 wrote to memory of 2264	2676	msedge.exe	109
PID 2676 wrote to memory of 1764	2676	msedge.exe	110
PID 2676 wrote to memory of 1764	2676	msedge.exe	110
PID 2676 wrote to memory of 1764	2676	msedge.exe	110
PID 2676 wrote to memory of 4160	2676	msedge.exe	111
PID 2676 wrote to memory of 4160	2676	msedge.exe	111
PID 2676 wrote to memory of 1136	2676	msedge.exe	112
PID 2676 wrote to memory of 1136	2676	msedge.exe	112
PID 2676 wrote to memory of 1136	2676	msedge.exe	112
PID 2676 wrote to memory of 820	2676	msedge.exe	113
PID 2676 wrote to memory of 820	2676	msedge.exe	113
PID 2676 wrote to memory of 820	2676	msedge.exe	113
PID 2676 wrote to memory of 5628	2676	msedge.exe	118
PID 2676 wrote to memory of 5628	2676	msedge.exe	118
PID 2676 wrote to memory of 5628	2676	msedge.exe	118
PID 2676 wrote to memory of 5636	2676	msedge.exe	119
PID 2676 wrote to memory of 5636	2676	msedge.exe	119
PID 2676 wrote to memory of 5636	2676	msedge.exe	119
PID 2676 wrote to memory of 5644	2676	msedge.exe	120
PID 2676 wrote to memory of 5644	2676	msedge.exe	120
PID 2676 wrote to memory of 5644	2676	msedge.exe	120
PID 2676 wrote to memory of 5652	2676	msedge.exe	121
PID 2676 wrote to memory of 5652	2676	msedge.exe	121
PID 2676 wrote to memory of 5652	2676	msedge.exe	121
PID 2676 wrote to memory of 5660	2676	msedge.exe	122
PID 2676 wrote to memory of 5660	2676	msedge.exe	122
PID 2676 wrote to memory of 5660	2676	msedge.exe	122
PID 2676 wrote to memory of 5668	2676	msedge.exe	123
PID 2676 wrote to memory of 5668	2676	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://omb.report/icr/202111-0938-002?utm_source=chatgpt.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffadf66c188,0x7ffadf66c194,0x7ffadf66c1a0
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,3081069249183607494,1177830476007684266,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - Detected phishing page
  - System Time Discovery
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1760,i,3513869492604532516,10138759182758610621,262144 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,11112271827587519868,4573097636527059453,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,12172294176916308642,9760811094905289444,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,17753504276187840802,3196363031507245137,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,4765919137212142609,159798655073136085,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,17209705297952648153,691376773418916497,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,4189106253846653837,11084738575783795669,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,1242714817371387160,16613206248886062775,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,12703406633113897953,16786055046028659870,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,12703406633113897953,16786055046028659870,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6300,i,17144991622392945239,8970741470395156947,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6332,i,17734655661505608546,6076874693618510773,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6644,i,16297213592587843731,10432408391038800469,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6824,i,16519576654310510086,1884019994670801018,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6952,i,17182900949741391991,13968294346797035218,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7116,i,13162164751937805110,12557061793358104595,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:8
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6360,i,8445115906251255938,17828499670702467385,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=7376 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7496,i,3617370226139729897,1570309977526756107,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=7500 /prefetch:1
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6344,i,6039799846938188623,11310126857389409669,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7684,i,8267557229537118948,5128815547820781627,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6444,i,7784552635728512875,4169029175172989128,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=8044,i,10293365770303307626,1367019213443945107,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=8048,i,5758136732272067495,18135571264379154741,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=8112 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=8264,i,8867476442101392329,5391564587407426212,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=8276 /prefetch:1
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=8416,i,5843952766509507023,2924353385125105560,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=8420 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8560,i,4511656747152024651,3569880047336768441,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=8568 /prefetch:1
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8852,i,6863728335425282704,9556516863206395473,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=8868 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=9040,i,11767560488964263884,10889287236856892508,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=9056 /prefetch:1
  2⤵
  PID:5156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=9288,i,4778263051411946086,16213812594237634609,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=9248 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=9440,i,6688210072683905803,1407505445199522326,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=9424 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=4364,i,14072333292660492129,6307455049005765060,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:6428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=10076,i,11480599497795899886,14808605473321776162,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=10056 /prefetch:1
  2⤵
  PID:6492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=9848,i,5830506913587646705,2627713838158778869,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=9760 /prefetch:1
  2⤵
  PID:6608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=10124,i,10056519755829512715,15131248674971695953,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=9604 /prefetch:1
  2⤵
  PID:6696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=9568,i,11714868123646599625,12582870529156138409,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=9284 /prefetch:1
  2⤵
  PID:6772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=10352,i,5370418999212614076,10195519345756536738,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=10224 /prefetch:1
  2⤵
  PID:6864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=10480,i,7009517940306425789,18038762920554986408,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=10476 /prefetch:1
  2⤵
  PID:6912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=10672,i,12112171877482086182,9448573411066656636,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=10652 /prefetch:1
  2⤵
  PID:6940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=10500,i,9297645909837795223,752368131974391962,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=10852 /prefetch:1
  2⤵
  PID:7064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9620,i,10388979229639476029,10068795809854463073,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=10468 /prefetch:1
  2⤵
  PID:7072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=10680,i,9282525225312489632,83477673872046473,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=9848 /prefetch:1
  2⤵
  PID:6196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=11168,i,2815096073453656172,16938052473513838703,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=11172 /prefetch:1
  2⤵
  PID:6308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=11268,i,11403877017737889689,1145775027972318892,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=11284 /prefetch:1
  2⤵
  PID:6476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=11464,i,4101136915355166483,14610983913618116690,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=11468 /prefetch:1
  2⤵
  PID:6596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=11616,i,13189239336972325897,13850771207853165301,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=11652 /prefetch:1
  2⤵
  PID:6808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=11736,i,1477106428460979339,13846263544378899442,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=11772 /prefetch:1
  2⤵
  PID:6148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=11916,i,13658418850692705506,6349972335625037732,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=11944 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=11988,i,5657955290734578514,12167459586481189547,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=12076 /prefetch:1
  2⤵
  PID:6760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=12264,i,4390142126289924508,2982459117580845332,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=12268 /prefetch:1
  2⤵
  PID:7200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=12292,i,2934526066537756661,12278335779296646142,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=12304 /prefetch:1
  2⤵
  PID:7272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=4500,i,12175863181947327253,8372167941835817408,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=12372 /prefetch:1
  2⤵
  PID:7336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=12228,i,5543851038811216529,9928038690416174655,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=12504 /prefetch:1
  2⤵
  PID:7432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=12436,i,766575866048861564,5764633312847347599,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=12464 /prefetch:1
  2⤵
  PID:7488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=12480,i,5985376143998834448,10951364382344082704,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=12780 /prefetch:1
  2⤵
  PID:7544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=12952,i,5297912883497667899,3088675294849243005,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:7648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=13052,i,17408202048533714408,17189773270594566438,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=13056 /prefetch:1
  2⤵
  PID:7708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=6700,i,3010137244999075311,6057651962217661389,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=9536 /prefetch:1
  2⤵
  PID:7988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9564,i,12908435371917685854,13004755550841631968,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=10212 /prefetch:8
  2⤵
  PID:8120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9624,i,8518625849716360772,7063827267194181610,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=13176 /prefetch:8
  2⤵
  PID:8128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9576,i,15305001491661501522,6975294074354262157,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=10180 /prefetch:8
  2⤵
  PID:8136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=6448,i,14658723371056006693,6919595649670015395,2097152 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=10220 /prefetch:1
  2⤵
  PID:8020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9452,i,6765625248679963134,18116571409216124306,524288 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=13128 /prefetch:8
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6248,i,9590290426510936991,8753031189649932452,262144 --field-trial-handle=2280,i,16473517164587400809,9804314785903780039,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6764

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0de3256e-0074-4179-8820-dccb18989e47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0de3256e-0074-4179-8820-dccb18989e47.tmp
Size 26KB
SHA256 4e84c64233f46cdf0ea3f14dd7b038c44ef8d6def8e091520e72be680f9331c8
MD5 402c3144414b51a919f9ab99fdd1438f
SHA1 404bc5de7ec71e6eb8244a65c6b05a723e60d0ab
SHA512 a8c5c440a153f572d229331657c80cce20b32cbec4d3ab82ba31337e61f313d301806003ff6f30a2f4f787f5427539fe5df2a361b3ad7e53cc0a461d11959416
SSDEEP 384:7iFiZcI0zsNi8TUNTUlIlu5pEZ+FT4HX58Ex8kJsXb+21aVZh6DKhH5Lo3:WFQIbwgXMTWaBbl1afYGH5Lg
TLSH
T1B0C23AF288D7993AD8AE9747A73E2D038EBCC053B5859640B3D85A1DCC961BFD30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21a52bfd-71f6-4b21-ae9d-349e2a74735b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\21a52bfd-71f6-4b21-ae9d-349e2a74735b.tmp
Size 18KB
SHA256 6918139f9c5208c9534c00515eed11bb94318d4e7cc379d3eb7f218f5783244c
MD5 2f986b54b4b102a07cc9bab6256eab5e
SHA1 9b265876bf151690fa3d79f3d33879d4ca967284
SHA512 df757530a99336ac7dc945c2e1e1dd0207e21644b5f5c171e52b6113bff0a6e10eefbe7667920afb3d11e412e81c6491d85d79064c44e062cc75628d604fab89
SSDEEP 384:xZcIhsNal5pEZ+8T4HX58Ex8kJsXb+2caVZh6DKhH5Lo3:ZhUxTWaBblcafYGH5Lg
TLSH
T115828E32D878BD7A5CF6E14AF44736034FF59153E3896B84C1EC6B1D00EA5A8231BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3eb88ef8-dc8f-4791-ba61-86f052e1b1bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3eb88ef8-dc8f-4791-ba61-86f052e1b1bb.tmp
Size 8KB
SHA256 e842a24b79101a673d885ed565b0d8dfd7f84c10cc959db5757b91b955061f8c
MD5 b3f1c52f619811f07a27037e1417e89e
SHA1 e63e0c5562e131325ade5f57b7ebb5e072a22926
SHA512 caa7624413a23cd47e3e53bd7fcb28a5a11f70ce733db5a501e34992336344769d82924d31a56fcb8ab2c6406852342d7ff6c59890b17a715a9c69e0d56d00b5
SSDEEP 192:1ONz6wlDgQmiUyWF84X58gZdjzorkJsXh7R+2Xve2qmU6:1ONz6kgV84X58Ex8kJsXb+2maU6
TLSH
T14E120831E578BC2B5DE2A549B08735039FE55217E6896F94D6EC1B1C01EF26C630ED23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

41019de2-0d1a-45f1-a612-bbccb37be354.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\41019de2-0d1a-45f1-a612-bbccb37be354.tmp
Size 8KB
SHA256 88ab35e6c9993e9e79260d5a628825ffc47c6fb56ae6eb751c40ce8879c3a7cf
MD5 31b378ee69967d71af5fb4f5e85a5cb9
SHA1 0a5cc9a66dc678546a2d3e0dfa61c53249a919fc
SHA512 c4e30081f8ce84d0a7290194c49578d8bb290a116ca38312f97e47f40e3967b29084b3f28b59f69365207ead4570813dbfe557d8e54e7243db87a68ff00924b5
SSDEEP 192:1ONg6wlDgQmiUyzFW4X58gZdjzorkJIDlTIeU6:1ONg6kgCW4X58Ex8kJs/U6
TLSH
T18802F835E9787C6B8EF2AE0AF58637139FE5112BE6552F44DAE81B1D00D725C2306D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4850d047-b340-4be0-a054-3d2ea0fc13b4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4850d047-b340-4be0-a054-3d2ea0fc13b4.tmp
Size 18KB
SHA256 3c33fda11f3da4839fe8bf8acc9df82588fa04eab7196dc587fbf0c5c70adf1b
MD5 b80b04bca127b774a786ce1e57f9040f
SHA1 e62661f660a7d243f776033478eb5495c2cef3c7
SHA512 17e59c5c361db7d16bad84f1a3eaad3a1decd643eb8feae242bf0535d512c996d865c6607d25c8a81fbd1c188b90d239d408e2c3f7490aa76e2e90264b9dd796
SSDEEP 384:WZcIhsNau5pEZ+8T4HX58Ex8kJsXb+2caVZh6DKhH5Lo3:EhzxTWaBblcafYGH5Lg
TLSH
T1F7828E32D878BD7A5CF6E14AF54736034FF49153E3895B84C2EC5B1D00EA5A8231BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a6c3f2a-b8a4-4e29-8b99-5b446aa60544.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\8a6c3f2a-b8a4-4e29-8b99-5b446aa60544.tmp
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db998f2ab3bc4e87d03b65e45c5cbb178df73d3cf3485b0f37651dcc2814f3c4
MD5 5f5f54c76a35e981894cc5fb6daba05e
SHA1 f502dcb8644de3724c621965a3a911c911ca900d
SHA512 5b35d9868c8c7bc14be58b8d1c82589ffa8c6d4d639a122de36a7603d6e1fdaa95347b26ba4692476227aad23f224b54f96b3ed88d347aa1c403e5ce05da56b9
TLSH
T16FD080B5D9756AF4E465253C02230604714C95425D433105D55145960D9D7C354D7DE9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 02cf6c2debe9573f3713554c359339f3deb6fa4abd8c14fc6d2577e42ce2d830
MD5 eec56aca3717cde66f2f4d578de1d4d9
SHA1 965ee07ac77588f49d8c4fdf547b37349747a74f
SHA512 90d05594a407bba8ca844c3df6d127aec4c8ecb87f3d2106da447965d8445c3863cdc5a376c90818be642f5dbacedbbb845f24cc640f422e049733d24470df99
TLSH
T163D02BF4A6D459E4D841283C11130304314CC4001C037111C46141D20D8E7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

247a215d-abd2-4d05-82e4-a5746fb43ea5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\247a215d-abd2-4d05-82e4-a5746fb43ea5.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

26509720-3bc2-4d54-809a-dfb6da260318.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\26509720-3bc2-4d54-809a-dfb6da260318.tmp
Size 10KB
SHA256 b8823c77370ae4e8a243ee48fb946ea88f0361261f8039d0e461627b816711c7
MD5 888b0e482e79c328b0601dd456374308
SHA1 b93beb54faa96b7410dccbda5232ebecf8fb0c44
SHA512 686158c667b87ed6581ec508d7dfab1353fa03cdb727a53853d495b53136eb5c34c0778f380850b30e0645cb56914b0a27d15edcf76c8eb644197cf28117d3c5
SSDEEP 192:sxZoRdWu/fHsEYIdpTkPHW6+WNm0FdYrFrFIg5uJ:sxZoWu/fHsEp+HbXdko
TLSH
T1FD22C852AE28B97B8CCBD21DBB59BF53E7F9443251901E48AAFC861C04F76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

893e7496-b59a-4c83-8fda-a63e84f47acf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\893e7496-b59a-4c83-8fda-a63e84f47acf.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 286KB
SHA256 71079c6a869895d6771a320c8ae67215d874fd77a71bb7659641a60a9da1c3a0
MD5 ad10adc5963bf7d8d9381eefde41cf14
SHA1 ea831558e8d2af142513912f2efc26349fbf17c2
SHA512 71587fec28b0ea9201f7b0f714d60c1c5d2fb4328c2221e6b598e8183e1807367445705db18feb8bda3c0163b0d4d05896675631f572019613d2325b8699826b
SSDEEP 6144:fAzkp9ZT4532vt4sZJ7nkdaX5b18GSDGd2zYyiDmolBEOpa3T/eQT:39F453wt7ZJ70aJZ8GsO2zY7D3TID/nT
TLSH
T14A5423359A0454E15212FF68A0FFA1CD41EDFD716A0D9211B9E367C60BBEBA08D5EC0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
Size 24KB
SHA256 d549ee737a59e33cef9f7b2b4069849b4814c54752d9c73c9f7e54eaf5c14a4c
MD5 19a7bf4559b0e74112911f8d66cce5d0
SHA1 cae587a5587d9e659896c356b63888a38306f65a
SHA512 40f9a9dcac4cfaea8c1205cb948fce0ce7d59f345104eda0cd21ca312d2794a99d3032c5ca43389ea249e74584e10d301a2f1ae4f6a05fb069d4fc5689edfbcc
SSDEEP 384:xNL7J77MRAHRH7V6n5XaPRWvHT7tfEVR2Cp8rfRCmgbL2IR1QNancIuzdzLA0Xgb:xBR7McRbkn5j12gCp8TCcNacI6xBgke
TLSH
T10DB2F18486064C9BFAE7E74D12C7CC57D92485D32F9EE60E6204EFF3E9D64D6260A903
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ee

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ee
Size 29KB
SHA256 ead5e259d31298272b92a94fc2ad2b93461daa30fe376b16ea43066d0401cab4
MD5 6178045ba51dff47a5c46db038f5d980
SHA1 d9a68f30cb824733f79040ee895b053f2acb57be
SHA512 69e8da1236991cc60fb8493140872cf936a50f0f9e4a9acf2402d1bd50dae5b0a7b3aa8c445d129a814ddab939e69285867cf4701301a0adee52200b365e2c03
SSDEEP 768:VH18UhuQZdit/0Ehbbt4/W2f2zxh10iKh1BoOIRAJK:VlUWc/0k53MkOIRqK
TLSH
T155D2F2B8D201E70E622331920E39F9A46E2973B88A189C55B514C3CB5FD1AF17DB71C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 5KB
SHA256 294068d1711d0a198cf077a1e86aadd01350b19fe9b6c9f610aceeda631d26b5
MD5 88616170e10316caffc4ccea5b02e9c1
SHA1 1f1561b2ac0ab7db4134fb23a7b2f7703112fd9a
SHA512 cc3f1e3906519089b0e6825884ca89bd1df77ae5883f617bbce4d52b5e480c6e8ece47a11bc5369e08191e040d7a2bcf8855f498ae998711b6a99657f46e0364
SSDEEP 96:n5jCDjhBRr65xIhsn/06Nw5AN4rdZ5440r7aaH41z:5cBRrG+hsn/06Nw5Ld44oY5
TLSH
T159C1CB7022B15259FB9D30B080F99AE23979BE75011B9EBAAB54F4753D73384B0381EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 afe4d3170a2e985b9956f327b9b3d2063f2d4be6ece9f3584d09ef9834d27c1c
MD5 b46fae8f86a82fc28713e060b14a6dc0
SHA1 1782cb6a871cfb235c2fde0734bfe95b29217ef4
SHA512 07e7d191ee38d0752816e9b4b56374eb4fadbee2810a67e31be15233cc5733c59180d4505535d837e0d63c90bbc5e4e29d30c820b8994ec5eb01e90d64226249
TLSH
T1A6511B4126A0636CF7EC307081FA93A736B48EB2619FCE76E794F47A9D46384F15502C
MD5 SHA1 SHA512 TLSH

Submit Download

23a99793-993d-41e5-ae1a-2e6584254e93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\23a99793-993d-41e5-ae1a-2e6584254e93.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

4d892aa3-b208-454f-b2a8-83b528531f7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4d892aa3-b208-454f-b2a8-83b528531f7c.tmp
Size 45KB
SHA256 8df9ac1a41038b661137abe544e8b153f38e7035991b16d393c2ca96884ff8a5
MD5 b704e987c71668cc6641aaf0b9e4516f
SHA1 1a8895fd61ab1662045ce9fe4d02eb34ae087b2d
SHA512 92e63bde1601aeef241b980ee9fed5f8d28369291b62fa279cc0d432101a10bb13acc5f68648b4aed6b7029eefd595ccdc8e02c8966f205d0251336e08131882
SSDEEP 384:DEP3EFESEhE6EgEJEAExeEDE1JER6oEcEbETETE4EgECE6ENEaETeEYBeEVEQJEo:B46K34C+DHi6Jpwez0XKN3e0rzJ6
TLSH
T13B236AFBC3E4466DDE1192F16B146E2FCF194629071C38368AE4AF1AA7F2472E10574E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89d7b7ed-2779-4a95-b1f7-011b4fe8d70a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\89d7b7ed-2779-4a95-b1f7-011b4fe8d70a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

af34bafb-ef33-490d-84c8-2882500fad5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\af34bafb-ef33-490d-84c8-2882500fad5f.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

6b4ed6e9d7c56ebd_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6fabe7896fd88446db06ee73b8077fb88a2bed85\e9ee9c12-552e-4a76-9216-da9099f8d6fc\6b4ed6e9d7c56ebd_0
Size 1KB
SHA256 95765ce803761b7386848a85452f3557240b48a127fa7d35d68f844527b2e84b
MD5 07a346bdc3e55e31726665d1547a2cb6
SHA1 2d393c1bfee17febd0e39c45ad4ef258a1b8a709
SHA512 d814384edaa4d96847ff8666f77c4d28d334b614898fbdbf210c267c824eb48dfb8dacc8b7af3fa712965cb7f35355c99c1c86ca45c41d4219d401170e2fecc2
TLSH
T11231C777EF3C0CA1CF66E5F1AF8EDC5CDB4280686AC27085030263A549D04F567005A1
MD5 SHA1 SHA512 TLSH

Submit Download

e9118626d27528b9_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6fabe7896fd88446db06ee73b8077fb88a2bed85\e9ee9c12-552e-4a76-9216-da9099f8d6fc\e9118626d27528b9_0
Size 12KB
SHA256 3949cdeaad3613b5fdc6da9a6b547b952d6eaa836b9de8a84c756ea50c104b88
MD5 fd546b7c7b69b88e09358135ca89bd6a
SHA1 da9918f97b6e7944129a255ad24278a7372d414c
SHA512 0d3b87ca18e39e63ed355018874b02e81375533db46f479b625f033a05c1aa53ee098091cb1797974c65e00f2475b92e0de652f3db37dbaefa4ec9a9e78a1296
SSDEEP 384:LF3XhaMFDqVnsBak81JaAkFXyEmF/O7WLDQ:hbD2lJMVSOqo
TLSH
T103428E04B4344E52C24ECD7D068207FE19B2997849DF511EB70D964EBAC8972C736BDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ecdecc61f77b7a29_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6fabe7896fd88446db06ee73b8077fb88a2bed85\e9ee9c12-552e-4a76-9216-da9099f8d6fc\ecdecc61f77b7a29_0
Size 5KB
SHA256 b058530e58019f6880e7336dc28e3399746471725e36bf3a0cc18071571b6d07
MD5 355d0aa9f7ce4959ea11a6e8995e2081
SHA1 bad580d85a52d5de5e034f91f8ed7cb73e3ad4ae
SHA512 677c2e8e82bf3cb6580d8ddcceb49c582b3deb4f5df8a73614cd44e414e15169008a7aaba8246fe33174a02d2d8852fd6585a8852f6ae978bd09694211aaabf0
SSDEEP 96:dMVQLi9DrWyr3Q/QS2RYCVrNjrCL+mUBzVDxE0856LBr9O2ztxaSUSWgurP:qQqHr3qz2RYCTjrckzZxRA2BlBxDUSWV
TLSH
T11CC17EFE190CD195DD0B7C62C95ED6DA2311DC46C38B9CFA094A51A93EC46F8838CDA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed2cd2adab095f71_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6fabe7896fd88446db06ee73b8077fb88a2bed85\e9ee9c12-552e-4a76-9216-da9099f8d6fc\ed2cd2adab095f71_0
Size 28KB
SHA256 ba9822596b09245c2233bf139bce6d383a6c6ac6e44051ee19f72d4ee65443f0
MD5 94f2af17d03e831d129e9bb2bdc7244e
SHA1 b754516f172ebf7dfdba4caeb3550ef605893218
SHA512 4b5192771aec45ca0a4dbe8dcfdc2d3a7bfd8871bd9bd9eac30a114c6435232aafec221f6e5e0df48d9f4adf24a10dbb1ae770d2c0ecfe65bef8a8bb8e384c54
SSDEEP 384:IIptlRf2LAma2XpsvEwIBjq0VxIJDhzOq2JMjvLXEroyFqKU71:IILL2LAmNswcyFqLR
TLSH
T145D28568FFB42564691EC160B65B96C47398800ACE8EDEB97AD4A154DFCC3E23971F0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f7b4f42352191a9e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6fabe7896fd88446db06ee73b8077fb88a2bed85\e9ee9c12-552e-4a76-9216-da9099f8d6fc\f7b4f42352191a9e_0
Size 1KB
SHA256 ec038c6e9c5e580270262a34437570f196198dcbe219056817ff55010e66b5c0
MD5 5718364557c34b3d47fb4a25dca458cf
SHA1 3e351bfe02851c0e8d84fcaf5c1ad1e74f89a9f1
SHA512 8229c3da716be67495bd72cda398f594807ad5c2569be582500c62d48125e52d7bb5af02a669ac5aebddd3d5939b53a4e060b1b0ac51e6c4b16d892dd9bba979
TLSH
T12A31EAB74B3C4C60DB61A2D1BF1FECC9EA4480884A45A598910277A650D47F56799461
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6fabe7896fd88446db06ee73b8077fb88a2bed85\e9ee9c12-552e-4a76-9216-da9099f8d6fc\index-dir\temp-index
Size 168B
SHA256 9eced7b1351d8779df6c2cbb2b84d1f7f5b0a60d249efc2d5ff844b12dd9030c
MD5 9e6163b608f204ecf90fc8abc15fcb71
SHA1 6629aa9b49da2f7df4845f92350ac200bdc2e9a0
SHA512 4a72ffb3f511bf97b3150b347f108f21ef3eca0371f92750cc336b8066a8de300bb358e56af34d251c8576dc5b6e7cb7a11ee02ce4f0a1c85be2746aac309ee9
TLSH
T198C02B28C40443B6DC182630E0D01006B55005C1668D484304A5201170B0141D082094
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6fabe7896fd88446db06ee73b8077fb88a2bed85\e9ee9c12-552e-4a76-9216-da9099f8d6fc\index-dir\the-real-index
Size 48B
SHA256 038186fc8a0ba2221914fcbbd68ae7d18ae4634eadc7542fe8b316cb0bf172f1
MD5 72e72b8dcb3727445cb983cd7529d5ab
SHA1 03eeab28ae688dafd0305b785546c3efec87b7fc
SHA512 d9e5a4b9334403aca5d3c2cf7c13b676b1edffa0074b3c3859d431d737da26c0fe7ef56d89ef586665ff717da3ba27759489b8c3fdb3f60db93944d4f37f5b20
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6fabe7896fd88446db06ee73b8077fb88a2bed85\index.txt
Size 160B
SHA256 9f75564478815a03704315db6f55b2835d3b1ea6493bcb506b529c56aed9ec4d
MD5 f3c2b86b6fa33a434d2c8b2e25a5d331
SHA1 2ed13b6908c36246bf5be9348fb9c624806bc983
SHA512 daec706e4d6d817d51e46d797abb0599a22d4568734d13f98f8c779661881f2847fd4e8edc2269336458db6c69aa968a96257d8498b6abf722d55e47ee333a68
TLSH
T1E8C08CB6230B993926D4A4CA7970ACDCB3992C257C828F0A42627B08D2B42F08020A10
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6fabe7896fd88446db06ee73b8077fb88a2bed85\index.txt.tmp
Size 155B
SHA256 288dede5f3a257b75dd8f1fba4d4e19738e927fba8a983aba58bd193776e3324
MD5 f0e8a3a739cd8af6766d916528a2eebf
SHA1 bb1835c525b45d39d2e52b521c76b24a67d8f8d8
SHA512 6d33fddbe04961a675495e242e413ac53aa68c95ed5b3f8c20fe93f1c5a5b5336abaef22c73ab6ed7352762822f45764a63ce8599219bba3d7d01a52cdec9f88
TLSH
T1EDC08CF7230B993D26D8A5C93A64ACECB38934297C82CF0A42612B4882F80F08000A11
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 5050310bc438bc74b0c64ba63d65a8e458543dcf035c144084116a0a16830f35
MD5 fe6c8a813a0264b8c37d4e2cddbd2552
SHA1 df2b440dcea0daefa2ac5d20e3902971b9a11084
SHA512 807c94d9182515ba251cff29ccd5aa9eba297914e9208088990a9eac1358e8c6a8d52ad5f45243a32b3a361ff769ec8b9bd86f9db227ab7d824fac004f96ad76
TLSH
T163A0027442A31132C49117F0794581443610CF30D601520280A24D5DD8A1DC14281980
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 7b389180c5a239d327a5e835dc69dc1c6ae1925f851f64131b8e5acd49efb66a
MD5 03acaabe57722b148ebcf2372357706e
SHA1 432bf35b46ea538f59e6dd7209cd49198d2d1782
SHA512 eea54d26550e2f0d5bcdec43215cb0527321dff6b219d1af65907e5896319a2d38f28df6a0d85f00cce70aa2be93376f90e45772a4cb4b405d26c87d56bdfa82
MD5 SHA1 SHA512

Submit Download

096ba49fc09b1fa8_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\096ba49fc09b1fa8_0
Size 63KB
SHA256 f7d667d9057db396f917ca2af32f0388319e4a83eb03c411225356149f2d7087
MD5 269db518f96fb35e2ae2b53e5bf1e431
SHA1 ce983897deeee78a51fab6cb5af5659e0bc44e0e
SHA512 8328c2178b231e8a638aa56515eb68501b7153ccbaaa807e53245ccf851e45d83056246aef3bd0cafb65bc262201eced1871d293be6796297445c4d4a75d9704
SSDEEP 1536:DPu5XhviJCQOynnmmYXDNno2ilY1DXuB3iHxG:a5hYOUnYTpiMD
TLSH
T142534BD9773174B3837BA1F1506F130B613AE1A7B404C4A4B1A8EDE15E54BA6027BFAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 72B
SHA256 616b28021fab61b35afdb65b4efe6086eaabdd9cfcd90827ca25fbac1b6fad71
MD5 796f4aa82fe198b275f8e3eaf5ddba95
SHA1 9c2c919ca6522c0c8725a5c9b3bf10ba87157f99
SHA512 790c8b329d1e0389266d4c9745ff4fd7b2bf7303704435a1aca85a4c7cbcbe581f8235ae5d5bec43135a925bf27204652d2c967c09993f4f8c3f6ae5c5496c33
TLSH
T130A002B631546561D00406F01091A245E7206D503601534670E40D4A9D505CA710A152
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 9a9cf5346e6597fc94a36662cd7d5a59987d9a478f2834611e9744579917cc86
MD5 cbb0de4d1645c8b27034c0ea38e75892
SHA1 82814e295c7d81ebf60508f98df11bb6ef3d4ca1
SHA512 ed202412fe52ee63a2a6daa78c2185e4dc6c7c54a930356a66b7ccc4a316c2c5a2c1c93ae675cb4103dc0affc2d9b70b389c8299d7e3b1cd7ff2c3e22bbc5818
SSDEEP 96:KIDCKs0+aMgKdKO2T+K42BiKK86iGQKvKR:E5PjxJV/K
TLSH
T135D1F18934BF025439BE258881B49F1A62813177751CE67BFFBC50619E2BE085DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b4d1466c-9976-4920-80be-6a7548bfd7df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b4d1466c-9976-4920-80be-6a7548bfd7df.tmp
Size 10KB
SHA256 ca51e0562a301d128a5b8f90afdfedf041211af3e0373b69c25698fb28b2fd28
MD5 d7ed1d008ce72f84c054edcaa48193a3
SHA1 7a43a41966aefafa61f06b65c4629c88534409a9
SHA512 2dcbb51f1169741e7ac0d418697547fa22254dd21fd97e291f85530f325a2fdcf75a8cc987d5d809c25b61f68e6e2ec57dbbb0ad47fc79d8a182e3f0930f8b22
SSDEEP 192:sxZoRdWu/fHsFYIdpTkPHW6+WNm9a/YrCrFIgrJ:sxZoWu/fHsFp+Hbb//9
TLSH
T19422A7526E28B97B8CC7D21DBB19BF13E7F9543251D41E48AAFC861C04E7ADD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c21db348-f286-4035-83ef-4536320f3323.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c21db348-f286-4035-83ef-4536320f3323.tmp
Size 11KB
SHA256 98bd0082673789ffa81a2fcd63b01cbf0ef36fd5dcc602e0b6b1a759ceb74efd
MD5 50520012496e990fe8a074c00bb83a37
SHA1 06474e7521706b7059d5277804030c44e1519f7b
SHA512 e8d901259052391554f7869982b194cff979046eacbb6e7724f86d58e1d0c09fde5dd93dd85e374bbe6856e34d5b1cb09109ceb7abe674af77c47941cb2d2393
SSDEEP 192:sxZoRdWu/fHs+gIdpTk88HW6+WNbWJu9jY/YrorFIg5EJ:sxZoWu/fHs+hkHbxy/nS
TLSH
T12C32B7526A28797B8CCBD21EBA55BF13E7F5503255901E48ABFC8A1C04F7BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2ec5df5-e232-4c31-9330-3afcff071ff3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2ec5df5-e232-4c31-9330-3afcff071ff3.tmp
Size 27KB
SHA256 af434e21da0272d8bb1eaef6daab02cedb17eb53da7d4b4aab41c5172564468b
MD5 36c8ff07b936c004d07678d9bba80da9
SHA1 7941ccf33ea3600eb543028d0c614ba4a6cbc9d8
SHA512 52fe91e6e3d6b703785315844bfa479bde0897621255cda0de776f635e0e0baa96f3d80e85cf4546db9c81bb82fa964a4f7d7bc3bfec83f8c8e2b20ae9cd5261
SSDEEP 768:eXy4J/DWvbtJh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbVroR3Rb:eXy4J/DWvbtJhu1jajiLm0budRb
TLSH
T114C20B3B644CCA7E4FC00B9DDD5E6F9B3E9802C7A6948D4047FA994C02C77EA91264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd78b875-8460-4a23-b8a0-a4243c21ca4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd78b875-8460-4a23-b8a0-a4243c21ca4b.tmp
Size 11KB
SHA256 e030efaa63368d6d9571f4376bc9bc09d2a9a8bf38d2fc8398e66641e94eb3e0
MD5 24d752cd32a0ede7af47d1ee7ef7a2b1
SHA1 e1e56d4f58bac896f6d5f9378a16408a31f54a58
SHA512 61ea23ec0f6dbc913c96a9c70765c2c0e21ac12ffc87bad0fb7c47a273a65580851492e7a14a75e8c53ba1d0b6532cab0a3355ef73bdaded883cfbfd4fd026ec
SSDEEP 192:sxZoRdWu/fHs+gIdppk88HW6+WNbWJu9jY/YrFrFIg5EJ:sxZoWu/fHs+h2Hbxy/KS
TLSH
T1E532B7526A28797B8CCBD21EBA55BF53E7F5503255901E48ABFC8A1C04F7BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

852f8ca6-f954-49a0-a210-0ea022745c31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\852f8ca6-f954-49a0-a210-0ea022745c31.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d26df206cbd87e28b76171182f1345b0d076d7d60249d7baa56f2cf770abd960
MD5 cd795e0e2e887f1963fddd94dee6a81f
SHA1 e867f7e5b7280a67c0f371f65f716ee2e52aaab6
SHA512 0de152b2704ab2c981f2f51a0754e7187c0810db0b75e47c6a54b7690d992a44db7355425cb54d16cbcc1d33ad8c4bc039235e5e688ec26f350edcb2a85192e9
TLSH
T19D414A58B6EA0148B3776E5AABF7686D487E7D772E0AD45D00110E4F0622B40D971737
MD5 SHA1 SHA512 TLSH

Submit Download