Resubmissions

20/10/2026, 20:58

261020-zsfmfsh13m10

20/10/2026, 13:30

261020-qr7j4sat5x10

19/10/2026, 19:12

261019-xww3hayt7p10

18/10/2026, 08:28

261018-kc237abz3x10

17/10/2026, 23:27

261017-3fd5msxz4k10

17/10/2026, 19:01

261017-xpdmksysex10

17/10/2026, 18:56

261017-xljdnabt6k10

17/10/2026, 18:54

261017-xken3sbt4q10

17/10/2026, 18:48

261017-xfxdbsbt2n10

17/10/2026, 15:23

261017-ssnvhahy3s10

Analysis

  • max time kernel
    790s
  • max time network
    902s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    17/10/2026, 18:48

General

  • Target
    MEMZ.exe
  • Size 16KB
  • Sample261017-xfxdbsbt2n
  • SHA256 3872c12d31fc9825e8661ac01ecee2572460677afbc7093f920a8436a42e28ff
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Drops file in System32 directory 2 IoCs
  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 10 IoCs
  • Runs regedit.exe 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious behavior: SetClipboardViewer 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 22 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MEMZ.exe
    "C:\Users\Admin\AppData\Local\Temp\MEMZ.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4256
    • C:\Users\Admin\AppData\Local\Temp\MEMZ.exe
      "C:\Users\Admin\AppData\Local\Temp\MEMZ.exe" /watchdog
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:1064
    • C:\Users\Admin\AppData\Local\Temp\MEMZ.exe
      "C:\Users\Admin\AppData\Local\Temp\MEMZ.exe" /watchdog
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:3784
    • C:\Users\Admin\AppData\Local\Temp\MEMZ.exe
      "C:\Users\Admin\AppData\Local\Temp\MEMZ.exe" /watchdog
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:4192
    • C:\Users\Admin\AppData\Local\Temp\MEMZ.exe
      "C:\Users\Admin\AppData\Local\Temp\MEMZ.exe" /watchdog
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:5136
    • C:\Users\Admin\AppData\Local\Temp\MEMZ.exe
      "C:\Users\Admin\AppData\Local\Temp\MEMZ.exe" /watchdog
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      PID:6072
    • C:\Users\Admin\AppData\Local\Temp\MEMZ.exe
      "C:\Users\Admin\AppData\Local\Temp\MEMZ.exe" /main
      2⤵
      • Writes to the Master Boot Record (MBR)
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:960
      • C:\Windows\SysWOW64\notepad.exe
        "C:\Windows\System32\notepad.exe" \note.txt
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4344
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=what+happens+if+you+delete+system32
        3⤵
        • Loads dropped DLL
        • Drops file in Windows directory
        • Enumerates system info in registry
        • Modifies registry class
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:5472
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x254,0x2f4,0x2f8,0x24c,0x300,0x7ffb4850c188,0x7ffb4850c194,0x7ffb4850c1a0
          4⤵
            PID:2480
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1948,i,16892621416719699048,12399975944386432962,262144 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:2
            4⤵
              PID:5388
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2172,i,7336289335027364214,1523980794374966261,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:11
              4⤵
              • System Time Discovery
              PID:5840
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,18051394714377419443,2744427412666907038,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:13
              4⤵
                PID:3512
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,17532897155291136797,13302705244737353685,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
                4⤵
                  PID:4336
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,3639029607383787225,1132293597207265426,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:1
                  4⤵
                    PID:5920
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,11147148142177183741,5182279690178659045,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:1
                    4⤵
                      PID:3536
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4364,i,14358761939250022456,13179869840677013175,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:9
                      4⤵
                        PID:2136
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3816,i,5575680454018336874,11043657324206298596,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:1
                        4⤵
                          PID:2832
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3696,i,4055827817967735057,10895838625903182289,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
                          4⤵
                            PID:5488
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3892,i,5756229590935153345,15226366400566179509,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=3856 /prefetch:1
                            4⤵
                              PID:2668
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,7367436036354718886,12920594112732414638,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
                              4⤵
                                PID:3332
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,7093186572758969930,2994391733689275708,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=3876 /prefetch:14
                                4⤵
                                  PID:2388
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,2198798761019709585,14141716798093738804,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
                                  4⤵
                                    PID:1876
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,2198798761019709585,14141716798093738804,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
                                    4⤵
                                      PID:1660
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6328,i,16128139393656017773,7875423061854417252,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:14
                                      4⤵
                                        PID:5792
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,12728365561030421938,17270101230887773158,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:14
                                        4⤵
                                          PID:4764
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5136,i,17334793513427282157,2880216044220742706,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:1
                                          4⤵
                                            PID:3716
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5180,i,14803726266245503813,14819969191829722714,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:1
                                            4⤵
                                              PID:1852
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1400,i,936462255079239040,6913550063689339787,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=1276 /prefetch:14
                                              4⤵
                                                PID:2124
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1408,i,15021550018587013224,10652385838859333049,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:14
                                                4⤵
                                                  PID:2364
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1416,i,14108137006285875513,2475070851066655428,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:14
                                                  4⤵
                                                    PID:908
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=1268,i,6729819072191237346,4332667512819432082,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=3888 /prefetch:1
                                                    4⤵
                                                      PID:4100
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=3756,i,14035579347973946047,12342924215327023754,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:1
                                                      4⤵
                                                        PID:5464
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6952,i,3472197427629699759,16902191904965457644,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:14
                                                        4⤵
                                                          PID:4920
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6760,i,7426484374461666981,2131029607508376405,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:1
                                                          4⤵
                                                            PID:3844
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7128,i,12900216019119665136,18408227998748863743,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7140 /prefetch:1
                                                            4⤵
                                                              PID:760
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6796,i,17180453851535820259,4456130491951110788,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:14
                                                              4⤵
                                                                PID:5708
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,15659128673095410398,10911209676949007621,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
                                                                4⤵
                                                                  PID:4488
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6092,i,17563541104413125259,9692815312221038719,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7352 /prefetch:1
                                                                  4⤵
                                                                    PID:3616
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7372,i,17028360018946239151,12020448864578723078,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7464 /prefetch:1
                                                                    4⤵
                                                                      PID:3744
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6756,i,10911431589883001313,15192197954671125712,262144 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:10
                                                                      4⤵
                                                                        PID:680
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6480,i,13882163350964972043,5368928117649642535,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
                                                                        4⤵
                                                                          PID:580
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=6052,i,2044778264325166686,9938685945556781729,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:1
                                                                          4⤵
                                                                            PID:2920
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=5016,i,15317042224490980935,100600202556065536,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:1
                                                                            4⤵
                                                                              PID:5604
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5440,i,10999108922971752424,3655943145495408314,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:1
                                                                              4⤵
                                                                                PID:4496
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7616,i,1939954936279172790,16225920371120257336,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:1
                                                                                4⤵
                                                                                  PID:4400
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5704,i,6277119745745710161,10158270469026091115,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:14
                                                                                  4⤵
                                                                                    PID:416
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=6472,i,15329579918532112028,11043572870529043602,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7240 /prefetch:1
                                                                                    4⤵
                                                                                      PID:4892
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,11528312913994075086,1966224461110401914,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7668 /prefetch:14
                                                                                      4⤵
                                                                                        PID:5900
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,18297235140808506402,2990517793764846440,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:14
                                                                                        4⤵
                                                                                          PID:2076
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6724,i,4595958310572875515,15049754019128814536,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7632 /prefetch:14
                                                                                          4⤵
                                                                                            PID:3284
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7376,i,11329421582865743865,10497549023299365421,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7552 /prefetch:14
                                                                                            4⤵
                                                                                              PID:6012
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7748,i,5365881189442045540,15839811111472874275,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:1
                                                                                              4⤵
                                                                                                PID:3112
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=5844,i,8487887731766904495,5286844560275684536,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
                                                                                                4⤵
                                                                                                  PID:5256
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7820,i,17297936739567267799,8148207154486478835,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7808 /prefetch:14
                                                                                                  4⤵
                                                                                                    PID:3312
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=7828,i,2462297486046769589,10464839578618995108,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7444 /prefetch:1
                                                                                                    4⤵
                                                                                                      PID:5252
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7820,i,17276689602043347137,2249578613092050920,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:1
                                                                                                      4⤵
                                                                                                        PID:3340
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=5440,i,14176005756758580893,16757540018338782167,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8120 /prefetch:1
                                                                                                        4⤵
                                                                                                          PID:1836
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8080,i,13925942224668774624,11417597755938458254,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:1
                                                                                                          4⤵
                                                                                                            PID:5680
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=7552,i,4778121075303536280,581190245985303715,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:1
                                                                                                            4⤵
                                                                                                              PID:5792
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7460,i,1366120549406512230,12454067483313687437,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
                                                                                                              4⤵
                                                                                                                PID:5436
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8392,i,3859663562218124350,7948544989028135935,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8420 /prefetch:14
                                                                                                                4⤵
                                                                                                                  PID:3684
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,15795413955604443028,12067006143503142070,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:14
                                                                                                                  4⤵
                                                                                                                    PID:4492
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8560,i,10272068677126798922,5848606656000486720,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8388 /prefetch:1
                                                                                                                    4⤵
                                                                                                                      PID:3868
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=3848,i,4740244041614811082,8663622238350364237,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:1
                                                                                                                      4⤵
                                                                                                                        PID:3424
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=5976,i,10665699392193626271,15955991455546234443,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8756 /prefetch:1
                                                                                                                        4⤵
                                                                                                                          PID:3372
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=8836,i,13748187503257470322,635796550041128396,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:1
                                                                                                                          4⤵
                                                                                                                            PID:5656
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=5456,i,9182473378213747286,12470910600427692349,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8428 /prefetch:1
                                                                                                                            4⤵
                                                                                                                              PID:3204
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=8916,i,2203761783830385418,7753835844550202729,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8924 /prefetch:1
                                                                                                                              4⤵
                                                                                                                                PID:4076
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8116,i,6352709935684365994,2479553982707487195,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:14
                                                                                                                                4⤵
                                                                                                                                  PID:4656
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=4488,i,4099420444396987870,6728002153329164263,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8196 /prefetch:1
                                                                                                                                  4⤵
                                                                                                                                    PID:4404
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=8216,i,11988130511290921442,15178465546779668224,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8608 /prefetch:1
                                                                                                                                    4⤵
                                                                                                                                      PID:4800
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=9080,i,17772844343345253266,6816302998176436548,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8920 /prefetch:1
                                                                                                                                      4⤵
                                                                                                                                        PID:4000
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=8956,i,8073225900555552286,18331393285449574089,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8284 /prefetch:1
                                                                                                                                        4⤵
                                                                                                                                          PID:256
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=8856,i,7604346528304254369,2772715101532394948,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8672 /prefetch:1
                                                                                                                                          4⤵
                                                                                                                                            PID:6844
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=9204,i,13824370521245307862,17216449416823087692,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9212 /prefetch:1
                                                                                                                                            4⤵
                                                                                                                                              PID:6928
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9196,i,14311002410707523983,14266624881279453241,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9308 /prefetch:14
                                                                                                                                              4⤵
                                                                                                                                                PID:6020
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=9440,i,6987111622104038671,3734689558888299137,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9468 /prefetch:1
                                                                                                                                                4⤵
                                                                                                                                                  PID:5200
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=9392,i,16404677484697639873,644753741705570050,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9516 /prefetch:1
                                                                                                                                                  4⤵
                                                                                                                                                    PID:5500
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=9600,i,14713711018680031874,13808502762911817346,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9528 /prefetch:1
                                                                                                                                                    4⤵
                                                                                                                                                      PID:6684
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=9356,i,14609943167959831197,4310762466828585579,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8236 /prefetch:1
                                                                                                                                                      4⤵
                                                                                                                                                        PID:2892
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9764,i,880786598186206879,9715971039822270592,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9696 /prefetch:14
                                                                                                                                                        4⤵
                                                                                                                                                          PID:7140
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=9696,i,10578646362839844262,15803945897777562485,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9736 /prefetch:1
                                                                                                                                                          4⤵
                                                                                                                                                            PID:6292
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=7460,i,3525195461759907719,7335346862281248017,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9096 /prefetch:1
                                                                                                                                                            4⤵
                                                                                                                                                              PID:1096
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=9668,i,10594849894653891650,5474097676412631015,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9996 /prefetch:1
                                                                                                                                                              4⤵
                                                                                                                                                                PID:6396
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=10044,i,14968874904188584957,17478910582764739462,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10036 /prefetch:1
                                                                                                                                                                4⤵
                                                                                                                                                                  PID:6804
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=10232,i,203970183048488279,12137796593452929679,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10216 /prefetch:1
                                                                                                                                                                  4⤵
                                                                                                                                                                    PID:2664
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=10236,i,2417636056147127577,12436686912135806203,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9744 /prefetch:1
                                                                                                                                                                    4⤵
                                                                                                                                                                      PID:5524
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9936,i,2370321869528623130,3718901171409108099,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9656 /prefetch:14
                                                                                                                                                                      4⤵
                                                                                                                                                                        PID:6236
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=9932,i,1182304290220978866,3303637596195062215,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10144 /prefetch:1
                                                                                                                                                                        4⤵
                                                                                                                                                                          PID:3092
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=9364,i,10150604998304531153,11487100829127272908,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10152 /prefetch:1
                                                                                                                                                                          4⤵
                                                                                                                                                                            PID:6112
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=9612,i,10078041196100542131,3854638850429862698,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=8956 /prefetch:1
                                                                                                                                                                            4⤵
                                                                                                                                                                              PID:6928
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=10432,i,6487737836698608991,17562344604535540707,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10448 /prefetch:1
                                                                                                                                                                              4⤵
                                                                                                                                                                                PID:6300
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=10400,i,13433171478679150045,13887143351616427218,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9364 /prefetch:1
                                                                                                                                                                                4⤵
                                                                                                                                                                                  PID:6540
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=10224,i,7974768633020603293,14577813633805635462,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10092 /prefetch:1
                                                                                                                                                                                  4⤵
                                                                                                                                                                                    PID:4700
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=10736,i,2977554895848481550,15275541783019521545,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10516 /prefetch:1
                                                                                                                                                                                    4⤵
                                                                                                                                                                                      PID:5512
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=10828,i,2210450226620795115,3739637563162650884,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=9640 /prefetch:1
                                                                                                                                                                                      4⤵
                                                                                                                                                                                        PID:7212
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=10876,i,10756766949772874325,9825249068335174418,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10672 /prefetch:1
                                                                                                                                                                                        4⤵
                                                                                                                                                                                          PID:7664
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=10528,i,17965432821844475118,14928285416519383421,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10448 /prefetch:1
                                                                                                                                                                                          4⤵
                                                                                                                                                                                            PID:7792
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=10784,i,4730023559243008543,896786658004388695,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10848 /prefetch:1
                                                                                                                                                                                            4⤵
                                                                                                                                                                                              PID:6960
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=11168,i,15237003946788697117,1512581504672299206,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10952 /prefetch:1
                                                                                                                                                                                              4⤵
                                                                                                                                                                                                PID:7340
                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11036,i,1846376094518192604,13394545105510425092,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=11300 /prefetch:14
                                                                                                                                                                                                4⤵
                                                                                                                                                                                                  PID:6964
                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10856,i,7189932471595443544,6678105281296365380,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10480 /prefetch:14
                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                    PID:5932
                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=11448,i,1354608079048427927,6579832950363738920,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=11460 /prefetch:1
                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                      PID:2892
                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=11320,i,3645640455825201701,15824486542346928870,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=11316 /prefetch:1
                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                        PID:6348
                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=11160,i,3640651293551177151,5986011011709566238,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10912 /prefetch:1
                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                          PID:7856
                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=10944,i,3164472781628356467,3189869630694620658,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10908 /prefetch:1
                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                            PID:7844
                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=11900,i,17212090933394674881,9159311867595848888,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=11948 /prefetch:1
                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                              PID:7696
                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=12012,i,10255966174665161765,9212627326841561762,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12032 /prefetch:1
                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                PID:2184
                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=11072,i,6474578240062188839,2385780827471016692,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12208 /prefetch:1
                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                  PID:6276
                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=12180,i,10642596126248585190,15010214723986384159,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12220 /prefetch:1
                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                    PID:6784
                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=11192,i,16200772716871926746,5644739181788354053,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10748 /prefetch:1
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                      PID:7072
                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=12408,i,16501275072522205243,5390750670685314693,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=11420 /prefetch:1
                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                        PID:2396
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12492,i,18415649368319487764,9456332666706624629,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12540 /prefetch:14
                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                          PID:8416
                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=12540,i,10428925908752103848,2300115297745464586,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12300 /prefetch:1
                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                            PID:8584
                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=12560,i,2064640339172078615,3396996448119251265,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12588 /prefetch:1
                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                              PID:8604
                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12420,i,14531180014327348515,16843710746083740310,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12152 /prefetch:14
                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                PID:8816
                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=11400,i,15501738965931235160,2643262897385449674,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10864 /prefetch:1
                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                  PID:9048
                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=12776,i,9389850598508371848,17757239775494280490,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12820 /prefetch:1
                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                    PID:9144
                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=12856,i,6821683115728940924,7090616983103531917,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12952 /prefetch:1
                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                      PID:8448
                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=12708,i,12827784798116993124,9827269820116366451,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12668 /prefetch:1
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                        PID:8480
                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=12804,i,2595360795553520601,4468976990354868480,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13104 /prefetch:1
                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                          PID:5968
                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=12104,i,4188183958459021188,11110580243146849277,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13240 /prefetch:1
                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                            PID:7092
                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=13108,i,11734577838350794767,1317984856210107409,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=10944 /prefetch:1
                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                              PID:8220
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=12836,i,6162484956258245614,11547039537820553025,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=12692 /prefetch:1
                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                PID:6300
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=13068,i,4575496843865895631,1603733178198478963,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13060 /prefetch:1
                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                  PID:9188
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=13444,i,17186097921585277891,5833613145763314177,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13276 /prefetch:1
                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                    PID:8544
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=13744,i,12640276804338368618,5929729391666943831,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13704 /prefetch:1
                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                      PID:7536
                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=13740,i,2497020690587657241,12761051582607210355,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13760 /prefetch:1
                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                        PID:7884
                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12568,i,6782215469867567794,3627505792148728346,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14000 /prefetch:14
                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                          PID:6264
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=14276,i,3726004926458679050,7567666236547914364,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14212 /prefetch:1
                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                            PID:8356
                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=14148,i,14646217427111180390,17787288383849149044,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14152 /prefetch:1
                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                              PID:7284
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=13956,i,16402146727303178239,1513298226204416862,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13884 /prefetch:1
                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                PID:7868
                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=13592,i,9411546852159317106,16602539985720432441,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13792 /prefetch:1
                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                  PID:6920
                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=14004,i,8597841593926239372,16644121230702649796,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14048 /prefetch:1
                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                    PID:7724
                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=14116,i,15984693993324111653,10712291711633898780,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13224 /prefetch:1
                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                      PID:7412
                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=13392,i,14538396751513972297,16869914888229046920,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13480 /prefetch:1
                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                        PID:5684
                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=13696,i,17545381955031936743,6782511034902971222,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=11892 /prefetch:1
                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                          PID:8108
                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=13792,i,13931691182583369534,4771121126651125505,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=13592 /prefetch:1
                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                            PID:8396
                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=13672,i,8578913279280966587,2458158097209268347,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14044 /prefetch:1
                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                              PID:8368
                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=14368,i,10014520921549945953,8190046125124660719,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14408 /prefetch:1
                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                PID:7896
                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=13388,i,1966714429111882695,17673790158426466061,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14536 /prefetch:1
                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                  PID:8404
                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=13364,i,9050488533606250110,3742297857585188216,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14528 /prefetch:1
                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                    PID:7824
                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=14376,i,13355455789961337218,7921525965049779716,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14444 /prefetch:1
                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                      PID:8688
                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=14828,i,14884935737972284281,8709592958138596456,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14512 /prefetch:1
                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                        PID:7892
                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=13232,i,924981841457097479,14241703255885299699,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14560 /prefetch:1
                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                          PID:7964
                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=14924,i,4426721492029842467,3028088419112025473,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14480 /prefetch:1
                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                            PID:8248
                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=13340,i,7074152815270090363,11476664869552705033,524288 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14844 /prefetch:14
                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                              PID:9756
                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=15068,i,7905407838411699848,3792648925103385227,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=14512 /prefetch:1
                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                PID:9936
                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=15108,i,9402071909952197852,5483622412422058234,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=15092 /prefetch:1
                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                  PID:9952
                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --always-read-main-dll --metrics-shmem-handle=14936,i,7396923148236165122,14730099934938717150,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=15028 /prefetch:1
                                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                                    PID:9308
                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=15204,i,12594030420382767635,7919659702228792434,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=15216 /prefetch:1
                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                      PID:9376
                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=14508,i,549262278724427536,15210323564251639390,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=15436 /prefetch:1
                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                        PID:9848
                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --metrics-shmem-handle=15092,i,13119098487179956022,16319843367583914090,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=15072 /prefetch:1
                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                          PID:9904
                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=15596,i,16347361021184603417,10502356879950948011,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=15032 /prefetch:1
                                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                                            PID:9448
                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --always-read-main-dll --metrics-shmem-handle=15312,i,4139993301363288829,2055894486722531857,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=15640 /prefetch:1
                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                              PID:7552
                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --always-read-main-dll --metrics-shmem-handle=15488,i,9054627080533816475,4745823580821313049,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=15432 /prefetch:1
                                                                                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                                                                                PID:9044
                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --always-read-main-dll --metrics-shmem-handle=15796,i,13527124763019968067,12702407973687299798,2097152 --field-trial-handle=2748,i,10990249479759119318,6194097995545808665,262144 --variations-seed-version --mojo-platform-channel-handle=15644 /prefetch:1
                                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                                  PID:8548
                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                  PID:4864
                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+send+a+virus+to+my+friend
                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                    PID:3868
                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=stanky+danky+maymays
                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                      PID:1928
                                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\mmc.exe
                                                                                                                                                                                                                                                                                                                      "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                      PID:5048
                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\mmc.exe
                                                                                                                                                                                                                                                                                                                        "C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"
                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                        • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                        • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                        • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                        PID:3308
                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=skrillex+scay+onster+an+nice+sprites+midi
                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                        PID:1928
                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape
                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                          PID:1520
                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\regedit.exe
                                                                                                                                                                                                                                                                                                                          "C:\Windows\System32\regedit.exe"
                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                          • Runs regedit.exe
                                                                                                                                                                                                                                                                                                                          PID:5616
                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\mmc.exe
                                                                                                                                                                                                                                                                                                                          "C:\Windows\System32\mmc.exe"
                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                          PID:1232
                                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\mmc.exe
                                                                                                                                                                                                                                                                                                                            "C:\Windows\system32\mmc.exe"
                                                                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                            • Suspicious behavior: SetClipboardViewer
                                                                                                                                                                                                                                                                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                            PID:1544
                                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\notepad.exe
                                                                                                                                                                                                                                                                                                                          "C:\Windows\System32\notepad.exe"
                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                          PID:2132
                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=minecraft+hax+download+no+virus
                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                            PID:3244
                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection
                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                              PID:2532
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=skrillex+scay+onster+an+nice+sprites+midi
                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                PID:2724
                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz
                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                  PID:2340
                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=the+memz+are+real
                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                    PID:1384
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz
                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                      PID:4488
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=facebook+hacking+tool+free+download+no+virus+working+2016
                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                        PID:5500
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                          PID:5656
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                            PID:2664
                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                              PID:6828
                                                                                                                                                                                                                                                                                                                                            • C:\Windows\SysWOW64\explorer.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Windows\System32\explorer.exe"
                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                              • Modifies registry class
                                                                                                                                                                                                                                                                                                                                              PID:1820
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                PID:4340
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=mcafee+vs+norton
                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                  PID:6664
                                                                                                                                                                                                                                                                                                                                                • C:\Windows\SysWOW64\Taskmgr.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Windows\System32\Taskmgr.exe"
                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                  • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                                                                                                                                                  PID:6204
                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus.exe
                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                    PID:1296
                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\System32\cmd.exe"
                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                    PID:7036
                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                      PID:2664
                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                        PID:6112
                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection
                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                          PID:3408
                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                            PID:3832
                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                              PID:7076
                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+send+a+virus+to+my+friend
                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                PID:4932
                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:7648
                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:6312
                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\Taskmgr.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\System32\Taskmgr.exe"
                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                                    PID:680
                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:1076
                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz
                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:7836
                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:7456
                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:7012
                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:8564
                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+get+money
                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:8988
                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=internet+explorer+is+the+best+browser
                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:8364
                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\SysWOW64\mmc.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Windows\system32\mmc.exe" "C:\Windows\System32\devmgmt.msc"
                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                  PID:8876
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\mmc.exe
                                                                                                                                                                                                                                                                                                                                                                                    "C:\Windows\System32\devmgmt.msc" "C:\Windows\System32\devmgmt.msc"
                                                                                                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                                                                                                    • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious behavior: SetClipboardViewer
                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                    PID:8884
                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware
                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:7396
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:7896
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:7824
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\regedit.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Windows\System32\regedit.exe"
                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                        • Runs regedit.exe
                                                                                                                                                                                                                                                                                                                                                                                        PID:6952
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=facebook+hacking+tool+free+download+no+virus+working+2016
                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:8288
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:6208
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+get+money
                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:8024
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape
                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:4048
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=what+happens+if+you+delete+system32
                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:8380
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\SysWOW64\regedit.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Windows\System32\regedit.exe"
                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                  • Runs regedit.exe
                                                                                                                                                                                                                                                                                                                                                                                                  PID:4072
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:8968
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:6500
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:8696
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
                                                                                                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:7356
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=john+cena+midi+legit+not+converted
                                                                                                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:9888
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:9284
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=the+memz+are+real
                                                                                                                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:8804
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware
                                                                                                                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9396
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
                                                                                                                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9068
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4956
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2556
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5464
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\AUDIODG.EXE 0x00000000000004E8 0x00000000000004F8
                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4212
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\System32\SecurityHealthHost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8172

                                                                                                                                                                                                                                                                                                                                                                                                                      Network

                                                                                                                                                                                                                                                                                                                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                                                            Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                            Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                            Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                            F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\D3DSCache\bbb32b58cf0a60ae\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 4B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                            00850a1d-d362-4304-b03e-09b96eb92f97.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\00850a1d-d362-4304-b03e-09b96eb92f97.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a054b71000da4486a8bfefd9f0a7443e1a9eadd2ca12cf57ea4fe999e6baf213
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            01a450b0-1472-444a-8950-ca234a3ad3e9.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\01a450b0-1472-444a-8950-ca234a3ad3e9.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 63d850da42f54d3c5c987a326904ae99490071906a76973c80950493a72f2e11
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            01adcb3b-fbca-423b-8510-7f734b955db3.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\01adcb3b-fbca-423b-8510-7f734b955db3.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 556f381216b49e0f72746f3965f5f7d675d1f82890a7f8f002c1ded2ea474a0a
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            0436bd95-15e2-474c-b21c-12248de99335.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0436bd95-15e2-474c-b21c-12248de99335.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5fa5507eb554c0b63ce714e736274196b1445c1bde27de4e7a1a88daed7edd1f
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            096b2a8a-f3c0-454b-81fc-c9e391835788.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\096b2a8a-f3c0-454b-81fc-c9e391835788.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1a1c0e7d90049e9fd98032b1db96ce3b70503a2013bb05b6d506795159f2f750
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            0b7f69da-fedf-44c2-9c55-78c083bea396.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0b7f69da-fedf-44c2-9c55-78c083bea396.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d0936d187141e3a400ff6ad11b8133d80b8c32977f76d5a3bad974f99600f4f1
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            0c5ae4b6-bf28-46b9-bc27-3772ba91a230.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0c5ae4b6-bf28-46b9-bc27-3772ba91a230.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4fa37f19802a08dcffb6b395b749cf95398ac668f5b17ce7ffa3a3ac51618ec0
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            1302402c-1332-4666-846e-eee71d5a90ef.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1302402c-1332-4666-846e-eee71d5a90ef.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6a88bc7aba1bfb15281bc21bc12f9bc73be75788f893aa1237ad8582c464d28b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            152009da-74f9-4b27-bff0-5d30a6337d6d.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\152009da-74f9-4b27-bff0-5d30a6337d6d.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 42KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a74d5ba667b688c7664711a15c5c566fc0afa2a42ae20a5bce82a5aa0edaa6d8
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            175cf653-c6a2-4a04-852b-5e7a72e04d4e.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\175cf653-c6a2-4a04-852b-5e7a72e04d4e.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7461a11759030c7bfb1bd13e8c65c2c4a44924455774677cbac2f5fa96965f1f
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            1b325319-e6bc-4ee2-bb08-fe03d47cce72.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b325319-e6bc-4ee2-bb08-fe03d47cce72.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 22ab6fe6916c1403dfc9e1ca139d9c0f8012dfbb0094f93a1963a470bdeffbff
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            1b6a7e70-e996-472b-8de5-33eca5d0c86c.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b6a7e70-e996-472b-8de5-33eca5d0c86c.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 976c1f23e2d6a8890f994207ddd003c6f49108587db3ef0a71285539db590c85
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            1bb4c98d-7cda-42cb-8df1-1ffa1951749e.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1bb4c98d-7cda-42cb-8df1-1ffa1951749e.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 06a6182dffb818c0922e4dde028d22aee0e01a15c31255cac5a0375049a9fb4e
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            27e316f1-45b5-478f-9792-d8d4fa029a9b.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\27e316f1-45b5-478f-9792-d8d4fa029a9b.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bb575ba33d06917a3990cc3f9cff0af3724ee223a9e2422613b125666ef89641
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            288b0d8e-2696-4b71-b770-79e90ccedbbb.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\288b0d8e-2696-4b71-b770-79e90ccedbbb.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a555db8db9943349e97966b6184f99a7ed483e8f6ffcb38a8e39cc28edb1bf33
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            29020a08-47a9-4eca-aab8-bc20ea1ff2a1.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\29020a08-47a9-4eca-aab8-bc20ea1ff2a1.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 097b6292be8a70dabf14c619bdb2013b3473eb213e595a574753560f43dc175b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            29a64084-9ceb-4c88-a0ca-ff52b9aae717.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\29a64084-9ceb-4c88-a0ca-ff52b9aae717.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5059397aaba230c50dc52d8ead9315df283a3c30413ed22aeae6937c0dc7d34e
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            2a4404da-7760-429a-a1a2-d35fe802adde.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2a4404da-7760-429a-a1a2-d35fe802adde.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f2cccdfccf5e00404fed6c1ff94978f2ac42bfd25718fe070e17d8aa8f6c37a3
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            2b109510-ba19-4c38-b81b-094413387204.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2b109510-ba19-4c38-b81b-094413387204.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c670053a96afe648917f4c4c97298658569dcc42bd88cb6d83df18f595d59d9c
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            2b204817-b14e-40fe-bdb6-e984c492bce6.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2b204817-b14e-40fe-bdb6-e984c492bce6.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a332890ce528134d24c21a70576266fd821fa5d49de536f9d3db005ff9afb87c
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            3086cecf-7edf-4638-a003-de574ff69e85.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3086cecf-7edf-4638-a003-de574ff69e85.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0f6485fee8977eb69a3f202d4a3b9f2dc9579ada411b228c3289c35e44ead04b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            3876509a-459e-4c24-bbb2-22146b2df568.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3876509a-459e-4c24-bbb2-22146b2df568.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 34e6e91dbbd114d7841dccae1f80e6986acf766c5407121af365e148afdd6679
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            3c20b47d-52b5-4f17-8066-9101fc9c855c.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3c20b47d-52b5-4f17-8066-9101fc9c855c.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 13008a724828cd166cdb834b63c33c9ada029e98c7d59945c9bf40e953ad0eea
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            3c6c6b96-4942-4c83-963d-4fc03187b674.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3c6c6b96-4942-4c83-963d-4fc03187b674.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fb8c831219040cf845e26de6bf5210b7fc1b824d9d2c60a5e0c92c26db1c3493
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            4201a59a-3bf6-4e40-97e9-3c407babd3cf.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4201a59a-3bf6-4e40-97e9-3c407babd3cf.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e50739e604ffb9fb3beab8663e9ac9975d3249c96c6d15a3d60bab942e863ff7
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            43b9c9cd-eb57-4743-9fc7-4bff4740342d.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\43b9c9cd-eb57-4743-9fc7-4bff4740342d.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7f4b759ae73c7762945c609554659766d6c4fc71999610622acf932b3f7f1f6f
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            46f05150-d663-492d-a9c9-9d4899e66dba.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\46f05150-d663-492d-a9c9-9d4899e66dba.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0f2eeafde5c76c2c6f4277be5452f72e1b30559e1333ce917fc412068ed8b6ac
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            4e8a9064-ee6c-4296-96f6-2454efe37962.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e8a9064-ee6c-4296-96f6-2454efe37962.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 13b48edc7e2a1e05515f3cc9a33d89dc9c14e479e4bf110e5b311d832d812326
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            4fcbc62a-2f73-4921-8822-dfd2d013abc0.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4fcbc62a-2f73-4921-8822-dfd2d013abc0.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 461e974a6a53fe659a90e0e08869d1ae8831f851d5422c360fadac97a92a5b51
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            5145e5f0-e2cc-4f61-9e8e-f1a44c848021.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5145e5f0-e2cc-4f61-9e8e-f1a44c848021.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 649c4a378c3a959ce2ad125b85e42e8df9e6b03960081aa43751b7aa1ee3d14c
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            52d2b8d9-5a6b-421e-aec7-cf9bcbde14d6.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\52d2b8d9-5a6b-421e-aec7-cf9bcbde14d6.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 b7cfb600b125f640cac8d5a1452aacfed78ae67b109d3f1c711e074d024aefad
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            55b22be8-2744-4504-b628-479f004274c9.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\55b22be8-2744-4504-b628-479f004274c9.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d17e07edafdee487e294d8037a3d4df0583fc759f0439802aaea376d31d84fb5
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            57ab5adf-8be6-4d75-99a6-11103e523959.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\57ab5adf-8be6-4d75-99a6-11103e523959.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 60cc536c18f7932ddd9e828c8b27becb2b1da7d7bf7e4bf34f2cc12c3e41da23
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            57c4f6ea-9c0e-428e-82b4-67d88fedea2d.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\57c4f6ea-9c0e-428e-82b4-67d88fedea2d.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2d4895e729dbbf2c20778827e9b3adb3094ec9a465662e44a39ebb73920f966b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            68431a57-45d7-4b8d-a54a-29c10b3b84de.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\68431a57-45d7-4b8d-a54a-29c10b3b84de.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ab2cfe448aef9dd74561bcf436234f02ce6b52f446b8815e5276648037921b5b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            6d316899-5aa4-4bbb-a0a2-defaa73e7bca.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6d316899-5aa4-4bbb-a0a2-defaa73e7bca.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bf0f352f5d6f0e0f438c1889c319b715f63cf39d54349ebe65140c6aa3fc08ad
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            6d5ae3a1-79b9-4c09-aac2-dee99c1959d9.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6d5ae3a1-79b9-4c09-aac2-dee99c1959d9.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6181ce1129bab0435b4c45437de4af4d1dc0f7a0523030a4a4076a054be9493b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            6dc126e5-6425-4e53-8040-11fad1993ff7.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6dc126e5-6425-4e53-8040-11fad1993ff7.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6640f086a2a8188ff245d51e9883e1d1cc92f9b2f46623a3568b880475bf7fa1
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            718f2037-f60a-46ea-8cb5-338a34f7b98a.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\718f2037-f60a-46ea-8cb5-338a34f7b98a.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c28d3c25fb3b1baeeb0a9178c18509ba20e1e5c994fb28a21b472acf641d716f
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            74655207-e338-4f85-8212-6108584f5c36.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\74655207-e338-4f85-8212-6108584f5c36.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 958b32c642f67b09fd9feea5084add3a95083918f8b3d60f7f467a203dd705e9
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            7905b85c-e5ba-4eba-9068-d3e192f302f1.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7905b85c-e5ba-4eba-9068-d3e192f302f1.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d6471ae7bf9e3f240cf519d5c4b4216511a067c643934a530440c13b21bb58d0
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            79c81079-b6d6-4eb6-b830-9036dde4463c.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\79c81079-b6d6-4eb6-b830-9036dde4463c.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 afb35c55c6e59af92d859f3cc10853bd48fcda3901a7774f9c0a837d8e2253df
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            79e6f168-da60-4769-adc8-4cca5f6dc330.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\79e6f168-da60-4769-adc8-4cca5f6dc330.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3f0a2c65f074ec12f70f611b9b80419c6222771702de03d1cd00fac4274f28b1
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            7c7abe52-e08d-4d78-9002-8f654d9366be.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7c7abe52-e08d-4d78-9002-8f654d9366be.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 036632ca628438cd217f8fc649dc7eb62d3cf6bfdd7bcc866a35c5e7e26e3ad7
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            8912eaed-85dd-4580-9a30-ae1327c0eca5.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8912eaed-85dd-4580-9a30-ae1327c0eca5.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 80ebdc1b8d8eca3c5d2cf1d7e820868562115f665dacc0afc764a96e99c4134e
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            895c34cf-ea9c-4918-8bb6-fb3aa006df19.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\895c34cf-ea9c-4918-8bb6-fb3aa006df19.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6e60f500b3be0925549cdb2da584b236f46b7b1838aab67a73dde6d5d98dcc18
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            8a70dffb-2d69-4a07-af39-edcf0681b242.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8a70dffb-2d69-4a07-af39-edcf0681b242.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1391ac7f9f3709b26a685dfb023851c8e7d19a788de55d5453db8b87279b265f
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            8aaef459-6a74-412f-be3d-e5aa30514fec.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8aaef459-6a74-412f-be3d-e5aa30514fec.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0f34744f1f545d4f74e2b9006d464c566ee97c4fae0ec8580b59fb1f72a35474
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            8b3e8b14-4c85-4f4f-9137-404ac50c029d.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8b3e8b14-4c85-4f4f-9137-404ac50c029d.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5c0cc70657948c75c3b8960ff71cfcbc2c27fa537e6537680cd2209af2fa8317
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            99dd0124-3817-4f7f-954a-3c557f03fcb9.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\99dd0124-3817-4f7f-954a-3c557f03fcb9.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7c925e9e210d3d8fdb046bd4f79aa3b90d1a3c4d9b05d5a2ce9431ac83a5ecdc
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            9ba31553-215d-47ee-8b18-ff03b5ab1a29.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ba31553-215d-47ee-8b18-ff03b5ab1a29.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a2cf92c1e2c5c2f7381db59f620f91fb1bffc2a3e41d7b332b27bd8e04b9fb50
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            26079050-a1b7-42c0-b95f-eee90c6cfd08.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\26079050-a1b7-42c0-b95f-eee90c6cfd08.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 105KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 faa1d17dbaa7275c5bf9f5f85c56bfd5886f17e7f8b00784101de8f5c039c356
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            3b09d077-b0e6-4a95-84f6-332b97af5116.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3b09d077-b0e6-4a95-84f6-332b97af5116.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 17c7edb96448e46d1281fb07ced70d2b0e19afa54cc7246daf964af1744cf9f8
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            50bf60d3-2eb5-469e-bbde-cbe84b79c15a.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\50bf60d3-2eb5-469e-bbde-cbe84b79c15a.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 65c4e7c0ea0670b65b3de1f6f45d4783e5df6936639cb35bfa85f6719b82951b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            56d14992-a2e0-496d-83e4-a2fd6faa7986.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\56d14992-a2e0-496d-83e4-a2fd6faa7986.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 12abca4adae5cdc085ceccafc6a87e25505b8e3ffa1fe6c55e06210af9fcefd6
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            5eb67560-84c5-4cff-aafa-ec9eec20d6c5.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5eb67560-84c5-4cff-aafa-ec9eec20d6c5.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fa838727581640d232ca4838af882c3e662c88909feffe6f49af16221a7dfda6
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            5ed496f5-dd9c-4b0c-bf38-8b680dee6874.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5ed496f5-dd9c-4b0c-bf38-8b680dee6874.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 54b70979b0cdee85f61df278e247cf06a8668231f28e903bf6d8b7400580aed6
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            7ae7989f-9b6e-47c5-8bb7-dbc50bf9991a.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7ae7989f-9b6e-47c5-8bb7-dbc50bf9991a.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 45196528df6adbe1a08a990c8682d384d2eb24f517a56cbb1309b03fd7166cc7
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            7ce42f95-c2a8-4aab-9385-1869f4ac0d21.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7ce42f95-c2a8-4aab-9385-1869f4ac0d21.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0fa3eb3a125d875a00e4000b89809bf8dddce31534d35b6462daa69c95eeee3c
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            90ee7a8b-8aa7-481a-811d-3f450a83e010.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\90ee7a8b-8aa7-481a-811d-3f450a83e010.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f375fd3f36584e5c2bc3a156f520ad9d631d3a88ee7c169b229b0c02c39073be
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            9c20dfc6-bb35-4b38-85fc-73690f2565fd.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9c20dfc6-bb35-4b38-85fc-73690f2565fd.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 88f791d9fa1803cba9e162e53df0b01c387041d71a89d889e5c1652400d284d7
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            LOG.old

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 331B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3e1dcaeaa5838449cfbe0922ce38020f6ed21668b8b2cba23be48135e822287c
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            LOG.old

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 334B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2cb63ad14d2e52765bd0f20862938ace93189024fb12373228caecefb3532740
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            LOG.old

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 331B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 09f5cfd54d0c5d8049da9e25fcd35be42f127d61afa800cfa3b0d2ccc6055f74
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000020

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000020
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 68KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 792dbef8523ffbba156a60cd0c40e70c173549606317d4ebb3f77f63fade6bba
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000021

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000021
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a2ed66f01753747ce359a8be0a9555b91e18d01c6bccf8e52a74078520d3720a
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000022

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000022
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 60KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9f7b069a52e87f3a91e2b92fce32cbe51acc310722d040538c900886938bda5b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000023

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000023
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 53c7c08337b4f5be6f7942897b364afd73bf4753786664659d303b5e660b118b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000024

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000024
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 53KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ca6134b7c5e692d9b343ecdd3d6a5490ea6d5bf0e2aac5402409080f3ff2cbcd
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000025

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000025
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 190KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 eb14b9db2450d7865c9d018d7f6c0640f505d101b0d8847e28f0eda027897ce7
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000026

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000026
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0364d368abf457d4e70dbc7a7a360f3486eaea2837b194915b23d4398bee91ac
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000027

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000027
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 def8db3d0393b41c222c29e372c8ce57f9696a7afd5e93ccbcb225e4277e6b96
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000028

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000028
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 118KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 765f8c271fe898c961d1818ea32527d67429b64165110c913ba31aaa9f5c30f7
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000029

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000029
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cfd52539ff4d5c4eab4fac64dbbb2bb6aa249d0d38a2dd092dbf6062f1d973d6
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_00002a

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002a
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 52KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e36a08d357aa0c03e800189dec817819924457289ddacb2d6584dc0bbe281359
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_00002b

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002b
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 21ed5a6d8199c3998382883a7f0594e8c7f7943ccae48ef5df6225eafd850c39
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_00002d

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002d
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_00002f

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00002f
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 91KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8a34db3dd801e719ab5db4f74644c5023418d428fdcd06fb32f9639cb9edb863
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f_000031

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000031
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 437KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            474ba81bdee1d152_0

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\474ba81bdee1d152_0
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 351KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2f2d46b69f57a06d36835ea2925c5a494875e20124062bdf66242f9d18243c0c
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            deaf620448ed00dc_0

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\deaf620448ed00dc_0
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 354B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c21930263341dd9d9ab9c4431114651dce4ed1c35819a687938109d1b21c7a6c
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a1582397c6b303f4ffd633be890e0fb79f74ce101be2c1486ec105c0ce1718ee
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 daea65009ee878628d34dba078eb4209ffabaf4fdbc7e1012e8f71a596c52afb
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 714a768952f259d448e7dc1a7f5320047d81d726d9d47efa434cffa0445293f6
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            00ada8df-a14d-4b28-b502-039d0645ecd6.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\00ada8df-a14d-4b28-b502-039d0645ecd6.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                            02cee4d2-2bac-4273-8cd8-66281af6f8c9.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\02cee4d2-2bac-4273-8cd8-66281af6f8c9.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ce6bcba697328f32cf8b81f60e705b8b05890a60b79b2387fd32f14bbe676b29
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            77751280-4263-496f-ad4d-7730df7fd371.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\77751280-4263-496f-ad4d-7730df7fd371.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                            8bbb4297-3b30-40ca-a2b1-b716c1988847.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8bbb4297-3b30-40ca-a2b1-b716c1988847.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 594ebba445524742062e388ff6383d01e374dc0a57110ece7159233e1a74d0b9
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            bc2c41f0-1e66-4a4a-bcc2-81ca1e562b54.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bc2c41f0-1e66-4a4a-bcc2-81ca1e562b54.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 40B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                            c96c580e-4141-4b5e-ba48-a2d448f6a217.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c96c580e-4141-4b5e-ba48-a2d448f6a217.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f3454425b1277de12c6dd0d743a9cebcd6936c8c64078ce1a27fe78e7c21519c
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            e3eed95b-54d1-4431-96a5-47e8b10e4e41.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e3eed95b-54d1-4431-96a5-47e8b10e4e41.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a0b56d65a80c20e134c5f016815f773fe84d9b7c84276e5764e0aaa991325bfa
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            index.txt.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 271B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2098e6db0a7031a6955c45fd082b21e8c1ed13e13c275462b9a0dbf209fdb2a3
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            89729643e8fac19b_0

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\89729643e8fac19b_0
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 255KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a68e5920cd61630960b78643c4e10442c5dbe9b61ecb90556388d8bd37728f58
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            temp-index

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d7fd5ab002ca0a910bc512d1bb011ead78e47ad573879f0571b95385d7d43d8d
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            sync_diagnostic.log

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 51bc65bc5fae447812450418e8c902f6256c88749f90b2b24c8d8e5827975483
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            a14ad2e0-90cd-4684-afc3-d1d7efaf5d52.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a14ad2e0-90cd-4684-afc3-d1d7efaf5d52.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            b650fc81-f495-4669-b382-6d5c694a9fd3.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b650fc81-f495-4669-b382-6d5c694a9fd3.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e54be545740491a208b8491d028dffefe2af87e67a5a549b3dc63e24ca2cea71
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            d3d92889-ad3f-4c6f-9334-b7f087ef8c2d.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d3d92889-ad3f-4c6f-9334-b7f087ef8c2d.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 6B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                            ea7d8408-a6e1-40cf-85b8-3941af04d106.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ea7d8408-a6e1-40cf-85b8-3941af04d106.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3a5f13dc71356fcca47f157e29214dc3c74f8df975a0834afe5f5dd704b98306
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            eec4b49e-5590-45c5-8a66-bfd7adbd0fbf.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eec4b49e-5590-45c5-8a66-bfd7adbd0fbf.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fd790c736379f1200f2f14635292458fa00a94b94b754b9f90906067b201be06
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            99dc615a-bc48-45a7-a736-f489b97447bd.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\99dc615a-bc48-45a7-a736-f489b97447bd.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            OperationConfig

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d258b9eb3e0ab422dc033be896f0c89b5cf028d6f60f9c2580363673211e7704
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7684e118e1b1b7dc9b0b808687e2a9a6822e721119491b21139a02cdaf7498a2
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 7d63f25671cfb691e5c76c7e6383cbda00c3fc41065763da3a89fa9a55f34621
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                            a1261a23-aeab-4b17-975d-bf05738539ce.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a1261a23-aeab-4b17-975d-bf05738539ce.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ed5c09e04ad2fc3540f913c567495973a2cccd8244fa2095fcab217ccab6352a
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            a2c3e848-c223-4674-84b4-05b1cd7d226a.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a2c3e848-c223-4674-84b4-05b1cd7d226a.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 dfb1a1a00607b960c31c36a8863751036e47fa981eea135bbce5dcb7ab5481cb
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            ae1fe560-6ff7-4e45-87e5-6f443ae2fddf.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ae1fe560-6ff7-4e45-87e5-6f443ae2fddf.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bbb4a2fc4884c73fb831e4727e8f2af806439a938a919d2060b6590906735e06
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            af22b4cb-2952-4e1c-9ad5-ab4fa808b17c.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\af22b4cb-2952-4e1c-9ad5-ab4fa808b17c.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 30f68d3fc849c02b07bf4e82345987ce369966579e40498b57c62a68fa01bd63
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            b11a332a-6d37-4e02-a119-f29d171adbb1.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b11a332a-6d37-4e02-a119-f29d171adbb1.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a7462a303d5ad3551aff7889f2f7c9a64413d8d44790c84f8f0f63c15f0a8d07
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            b1e04f91-74f3-422a-bdcc-f8d7f346f017.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b1e04f91-74f3-422a-bdcc-f8d7f346f017.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 950b43e4adfcf8e5c195e09019bcc349ba1c507ce4eff05030b1863191d93f73
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            b1f3d6a5-5f8e-4ae7-9001-778fe0be22cf.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b1f3d6a5-5f8e-4ae7-9001-778fe0be22cf.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8216c3fe4949d8672cc761033d649c89696f94eff05e6dbe61d9f0ac32514a2a
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            b1f99400-10bd-4696-bdaf-5bfaf419da34.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b1f99400-10bd-4696-bdaf-5bfaf419da34.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 dfee5054e62fea29ab9ee73bde46ec8233f47be0a76b6371952c0a18de0c5ddf
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            b215d5c9-b7ca-4083-8340-4617db949e14.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b215d5c9-b7ca-4083-8340-4617db949e14.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 37KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0338a701f8253ecf5044a84fa5727006c3dd2e6e2f3f886d7b7b4490178cb978
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            b3598774-d036-4945-b77d-dbc4f178c386.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3598774-d036-4945-b77d-dbc4f178c386.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 6184f1ed15ea5d5d4caf4c16bf805647edd7f7d511e49cd1b6b83482d61dd383
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            bb74d6ad-1676-408f-af6a-6aad3fb0da88.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bb74d6ad-1676-408f-af6a-6aad3fb0da88.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 42KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bc063f985b8bfb0d4140e443d230950bfa5ebdac3a6cd6e746c8ba573a843e01
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            becf2bfc-db60-4470-a778-58cd63044548.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\becf2bfc-db60-4470-a778-58cd63044548.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 542f3a779bba64d550144dcf8b934c114f6a373d8ea1a0429bde1da32b59a645
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            c0b4f870-e181-4927-aee5-5c5da058750a.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c0b4f870-e181-4927-aee5-5c5da058750a.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9d122310f0df421e1bb33cfe32b2d911fd8d140b84bf7bc5cbfe999f6d2d86c9
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            c14ed174-4dd1-44a6-a586-33185d05da8d.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c14ed174-4dd1-44a6-a586-33185d05da8d.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8a8448da53aad8d6d3e422f062ec0cd2cbafcef993b923d21fe5469c2c4268c3
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            c4355d7d-1f33-4dd1-8852-af172fd28f4b.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c4355d7d-1f33-4dd1-8852-af172fd28f4b.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fe3f6e809570a914b097a98ca3f01f454c15efcf8cd7897e631072ae1f83b2d0
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            c43fce9d-146a-46b2-ad73-0d98b92b67a5.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c43fce9d-146a-46b2-ad73-0d98b92b67a5.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1aa2203f1b95fb17f3984397cb143b957e3da49f928f4a41ca2a828b91ed3ad7
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            c4dbcf56-8416-4127-b9ca-0a228dd9e842.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c4dbcf56-8416-4127-b9ca-0a228dd9e842.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 66a5e16ecb9861a0c8a497066f053f11d88a2daf943d63323537d261afa6e529
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            c749a656-ee4c-478d-a863-58dbb45c500e.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c749a656-ee4c-478d-a863-58dbb45c500e.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 22a1533ca32785a379cf25fe2896267afb030d98c68ceb17a908f5634eeb0ac8
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            c79e9105-10d9-44ff-91bd-6ec8b70a863f.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c79e9105-10d9-44ff-91bd-6ec8b70a863f.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 33759ce6e7a2cb1a2ed62982f9fa4764f54d919b32ffcdb82ab76385a6cf08c6
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            c8e85ec5-a551-41f6-ba16-3de10853eb90.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c8e85ec5-a551-41f6-ba16-3de10853eb90.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 752bf75541ee5c838b90eaa86ef9b60844adab65393b9701d588d170a7e150a4
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            cb4cd5a3-e3e7-454b-ae90-a2ae7d4606c0.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cb4cd5a3-e3e7-454b-ae90-a2ae7d4606c0.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 d51f61d5695b022f5080b85ce423b8eed8426e8d24becd78b6f617c6855d4132
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            ccd62925-5ccf-47f6-ba4c-8affd8f3b642.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ccd62925-5ccf-47f6-ba4c-8affd8f3b642.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 34db36752b5932413f0f175d25a21720f55c3a74716178683f0780b853e58797
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            ce836d4b-f419-4f37-9d92-a3799b1e92cf.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ce836d4b-f419-4f37-9d92-a3799b1e92cf.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 be0718de8ab3a44a79658336f35f40930dd1acb5c3fd7577649a1b04994c578d
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            ced43cb1-b4d1-45ca-b979-76233f276e80.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ced43cb1-b4d1-45ca-b979-76233f276e80.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cc317867f8c45b22d0b3369ffbeb1faac9bd557268c6576ce34ab6c6bbf247d8
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            cf5c6b25-62ff-47cd-961a-7c6887f38551.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cf5c6b25-62ff-47cd-961a-7c6887f38551.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 ef65b29451ab5f57558d74c1585a102f30a66138780e981316037f0a55e01881
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            15bca41b-8981-424e-976a-4726a7af9452.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\15bca41b-8981-424e-976a-4726a7af9452.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 852B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8bc825a30631771ae614094fd07267a0f3350af6ac0fee62fe078d20f34e8420
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            17640e0f-d8c2-400f-8a77-6205c6c4ff34.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\17640e0f-d8c2-400f-8a77-6205c6c4ff34.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 252B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            27fe2dd8-8e93-4aef-ba1f-c79d3892f47f.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\27fe2dd8-8e93-4aef-ba1f-c79d3892f47f.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 492B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            35f6adc6-9eab-4362-b1f1-fb5f1ac09327.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\35f6adc6-9eab-4362-b1f1-fb5f1ac09327.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 372B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            4a7944a6-3933-4c0e-8da1-927e255d6038.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\4a7944a6-3933-4c0e-8da1-927e255d6038.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 732B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 556feddcbd9b9cd3e28eadee8e310af21c5251e941f1ce8a66aeb0ce40bbe84d
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            4b58ceb9-d745-462d-8597-eca52a639efb.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\4b58ceb9-d745-462d-8597-eca52a639efb.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 70d0a71aab99d3f5f398573920b8412d130e56b0232d880414661dd12939f93b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            7b52a993-1b61-4a48-9094-fc3c3766562b.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\7b52a993-1b61-4a48-9094-fc3c3766562b.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a29b3c908c3fb876d3f23731003991c6d9a0a90ab7102637c3d077baaf72082f
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            80c1385a-c1e9-4cfd-9e4b-ece82d1400b1.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\80c1385a-c1e9-4cfd-9e4b-ece82d1400b1.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 612B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 aefe41ba49514b111597c7f1d7c4be25749a5c72259d4deeeba6393a98942c23
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            82f29b74-bb5f-494d-b6f2-a0d38ae56070.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\82f29b74-bb5f-494d-b6f2-a0d38ae56070.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 132B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            8b239d42-ba9a-4e16-bc1f-6bc011cd61b0.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\8b239d42-ba9a-4e16-bc1f-6bc011cd61b0.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 97f6e93df5d8fcefe496ab73299ce2cd5427f9ba8cf9c504e6492beb9e878ed8
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            96b0e885-5971-40ac-9c18-f20287081282.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\96b0e885-5971-40ac-9c18-f20287081282.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0276aa00e88c0c5ad8c54e4409c7cd1099fad50f7da5d420999d7b95b25e54cd
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            a7361e49-9924-421a-8a69-4181180f55fc.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\a7361e49-9924-421a-8a69-4181180f55fc.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 67353875e88fe69a56887f38465348f4ffb849037520bc4470807cb408f04bfe
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            c0e18de2-e399-4afa-9cc3-764d44300c8b.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\c0e18de2-e399-4afa-9cc3-764d44300c8b.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 37790bf1a0fb12ce34cc8754cbec55243757d80362f198a4df59a7625c6ba9d0
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            dbfadfd9-b4a6-4980-9c4e-059b37e14f18.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\dbfadfd9-b4a6-4980-9c4e-059b37e14f18.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 972B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 a5c9b43b44afa81381ce617a0d2752a5597a3e079393b550369188093e5db410
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            fe841191-a45d-47b1-958e-b1a6f4231c43.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\fe841191-a45d-47b1-958e-b1a6f4231c43.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1510c23644ba71aef6fac2773e2360c324bab93f34a9e4bb1024386375c911b1
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            d11683af-59ff-4cfd-8367-be4cc01050e4.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d11683af-59ff-4cfd-8367-be4cc01050e4.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 610d3326d9d8b4a489fd36cfe3d776d481dc4d85bae70c4ee3cceae055f82fec
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            d64e0552-07bc-4ca8-a281-4188ea0ca43d.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d64e0552-07bc-4ca8-a281-4188ea0ca43d.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 f71bb5e84f9f6a99ca094935ed97efb66ad38fecd2a01d9a5edde2718ff33307
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            d952fd9d-b85a-44c4-adf9-36c83488e41b.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d952fd9d-b85a-44c4-adf9-36c83488e41b.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8305d112c1fc85937c16146bbaab3c444afb3e794c15ddb4fe6ebc8f6bb4deba
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            ddd3f059-533f-4673-bbe5-919fb2d311c3.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ddd3f059-533f-4673-bbe5-919fb2d311c3.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 aba13735143600dfb0dc015ff1b512772224c1cd2406e1fa7d8ddac283e6fa17
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            e1dfd051-3f18-4316-aa32-89fe03031e35.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e1dfd051-3f18-4316-aa32-89fe03031e35.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 59544acb77518ca3e71a76277dc0718fe89e2c94c0a3f1768f8d0271c92dd528
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            e261cd6b-bc3d-4708-9d6f-406c835c2362.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e261cd6b-bc3d-4708-9d6f-406c835c2362.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8cd47d475dae6c25d8ef0708110bf329e8e69e20f200516726e268deb41be137
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            e29d78e6-c8f2-4d3b-8482-29d629fad33d.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e29d78e6-c8f2-4d3b-8482-29d629fad33d.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 473a3b81bfc6546df7c0a41e58150c94014ad8559f0df4dffeaa73e0a4ef1493
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            e54af99f-a765-4bd1-b907-dafae8115705.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e54af99f-a765-4bd1-b907-dafae8115705.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 79e7a363708651c813173017a4a5d997c605458ddc72a7aaa22c33b3e8bf4575
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            e93df07b-6a1c-41e4-aece-bc8b4a7cba6b.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e93df07b-6a1c-41e4-aece-bc8b4a7cba6b.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5792e363fe7333cb55445c834536530f1b976d22468277c7207f5134bf744ad3
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            ea29328c-017f-4b4d-b390-d82b71870e3b.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ea29328c-017f-4b4d-b390-d82b71870e3b.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 823620c5a7b5cfc0bbf6a4689956d0b43f05815508ad34db01c3c6121144e6e7
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            ea507445-21ed-4c5c-97a4-93aa0aaf3f47.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ea507445-21ed-4c5c-97a4-93aa0aaf3f47.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5b0f03ae4de2bdb41a0be007fdab0a4a62ea5945d172f9e09157ad7214926516
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            5b157deb-4db2-482c-ae2d-8f789f5c967c.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\5b157deb-4db2-482c-ae2d-8f789f5c967c.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 13B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                            f4a92ad0-d42a-4290-a409-101f555be69f.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f4a92ad0-d42a-4290-a409-101f555be69f.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 c2e86577a0f0fe0f0bd34dd167989e29715c27004a0ca5aa42daaaf4ce374cae
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            f70ccb03-a585-43d6-a7b3-05747b31c8d5.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f70ccb03-a585-43d6-a7b3-05747b31c8d5.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 5723a08f7fd4fdf3cc9a36269b3edc98974262b1a9af67c481855d67968fe3ba
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            fd84aade-ed95-4e14-8b23-1166500eaf39.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fd84aade-ed95-4e14-8b23-1166500eaf39.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 585c90720f5b5dad6c7a83a9c5548448c1f354546853aba79b38566ecd49b485
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            fefc766c-4c6e-40d9-a7a6-3c4db896450b.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fefc766c-4c6e-40d9-a7a6-3c4db896450b.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 88265cf01e272956e9a581d1303e34ca7e8bec8a7b100e4f134390f5f5cdbe3a
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            c044eb1f-669b-4ff9-8684-edbc35261a8f.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\c044eb1f-669b-4ff9-8684-edbc35261a8f.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                            db2676d8-412b-42b4-9352-1caab912e1d1.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\db2676d8-412b-42b4-9352-1caab912e1d1.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            content.js

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5472_1222445671\CRX_INSTALL\content.js
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            LICENSE

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1066344646\LICENSE
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1066344646\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 85B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1208877227\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 113B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1283078297\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 53B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 e1cd8395b2a987ed86c356bfae0952ae09f0cb012030690d6e23615698478f77
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1297315510\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 43B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1432709359\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1576243713\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 165B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1616006035\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 160B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1677368351\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 177B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 77a882c1ca9977c89f8e67a15ec1854a8eb84e1e79bf7009808ae9eaf5193b65
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1842191175\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 141B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 fe8c5046a79693a9b7f32bfc3ed7c8fdf84c5d186f5326a527ac508345a44009
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_1882609865\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 80B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 abe933f0db95b1a75786da21de82feb5270ffa7ae072270923da2437710d93ba
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_239169507\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 135B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_304032778\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 165B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 880b2b81f96f7ec0799e2939e82955327f65a8e4edadfdd89cfebb70d8fb6f2e
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_572739933\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 135B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            manifest.json

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5472_958579551\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 238B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            note.txt

                                                                                                                                                                                                                                                                                                                                                                                                                            • Path C:\note.txt
                                                                                                                                                                                                                                                                                                                                                                                                                            • Size 218B
                                                                                                                                                                                                                                                                                                                                                                                                                            • SHA256 8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270
                                                                                                                                                                                                                                                                                                                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1110-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1100-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1098-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1109-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1108-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1107-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1106-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1105-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1104-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1112-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1119-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1118-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1117-0x00000000071E0000-0x00000000071E1000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                            memory/6204-1116-0x00000000071E0000-0x00000000071E1000-memory.dmp