1dbfb16ab40b256342d8e41f269f0bd6934b54f6b9a2b55e3099068e0a6b2c7a

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
42s
max time network
859s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 22:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Banner-And-Zero.exe
Size 10KB
Sample261022-2hb8dsf12v
SHA256 1dbfb16ab40b256342d8e41f269f0bd6934b54f6b9a2b55e3099068e0a6b2c7a
MD5 dc34e29fa5f136c787e7478d87bb193c
SHA1 14f0ae23a03005f359dafe49b19a47b529a4aa3f
SHA512 135ba5275d26c13805df6e4e1727f2e11971c7941e6a278a2a3503fd81f225c357723233051b4bd2e95476d66cf6c553602144a9455732d8b2fad4e993c01cae
SSDEEP 192:HKFvjcXSJXbMJJopEhlOoCptJlCp/sUJApjENajC42ns2ZkTq52K+m:HKFvgXSJXOoq85sZs2NF42ns2Z8K+m
TLSH
T1A222C402FDCEB16CF851AF32467D246575A4794023B14EEF14B4B6241998BF0A7BBF18
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3976	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 22 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000_Classes\Local Settings	explorer.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe
6016	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6016	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 880 wrote to memory of 2856	880	Banner-And-Zero.exe	90
PID 880 wrote to memory of 4612	880	Banner-And-Zero.exe	92
PID 880 wrote to memory of 5812	880	Banner-And-Zero.exe	93
PID 880 wrote to memory of 4888	880	Banner-And-Zero.exe	94
PID 880 wrote to memory of 6016	880	Banner-And-Zero.exe	95
PID 880 wrote to memory of 3544	880	Banner-And-Zero.exe	96
PID 880 wrote to memory of 5452	880	Banner-And-Zero.exe	97
PID 6016 wrote to memory of 3024	6016	msedge.exe	98
PID 880 wrote to memory of 5332	880	Banner-And-Zero.exe	99
PID 6016 wrote to memory of 2532	6016	msedge.exe	100
PID 880 wrote to memory of 2216	880	Banner-And-Zero.exe	101
PID 6016 wrote to memory of 2532	6016	msedge.exe	100
PID 6016 wrote to memory of 2532	6016	msedge.exe	100
PID 880 wrote to memory of 2788	880	Banner-And-Zero.exe	102
PID 6016 wrote to memory of 3976	6016	msedge.exe	104
PID 6016 wrote to memory of 3168	6016	msedge.exe	105
PID 6016 wrote to memory of 3168	6016	msedge.exe	105
PID 6016 wrote to memory of 2860	6016	msedge.exe	107
PID 6016 wrote to memory of 3472	6016	msedge.exe	108
PID 6016 wrote to memory of 2860	6016	msedge.exe	107
PID 6016 wrote to memory of 2860	6016	msedge.exe	107
PID 6016 wrote to memory of 3472	6016	msedge.exe	108
PID 6016 wrote to memory of 3472	6016	msedge.exe	108
PID 880 wrote to memory of 4420	880	Banner-And-Zero.exe	106
PID 6016 wrote to memory of 3404	6016	msedge.exe	112
PID 6016 wrote to memory of 4132	6016	msedge.exe	110
PID 6016 wrote to memory of 2224	6016	msedge.exe	111
PID 6016 wrote to memory of 3404	6016	msedge.exe	112
PID 6016 wrote to memory of 3404	6016	msedge.exe	112
PID 6016 wrote to memory of 4132	6016	msedge.exe	110
PID 6016 wrote to memory of 4132	6016	msedge.exe	110
PID 6016 wrote to memory of 2224	6016	msedge.exe	111
PID 6016 wrote to memory of 2224	6016	msedge.exe	111
PID 6016 wrote to memory of 5396	6016	msedge.exe	113
PID 6016 wrote to memory of 5396	6016	msedge.exe	113
PID 6016 wrote to memory of 5396	6016	msedge.exe	113
PID 880 wrote to memory of 5236	880	Banner-And-Zero.exe	114
PID 880 wrote to memory of 4004	880	Banner-And-Zero.exe	115
PID 6016 wrote to memory of 1856	6016	msedge.exe	116
PID 6016 wrote to memory of 1856	6016	msedge.exe	116
PID 6016 wrote to memory of 1856	6016	msedge.exe	116
PID 880 wrote to memory of 5676	880	Banner-And-Zero.exe	117
PID 6016 wrote to memory of 1876	6016	msedge.exe	137
PID 6016 wrote to memory of 1876	6016	msedge.exe	137
PID 2856 wrote to memory of 6044	2856	Banner-And-Zero.exe	119
PID 880 wrote to memory of 4580	880	Banner-And-Zero.exe	120
PID 880 wrote to memory of 4628	880	Banner-And-Zero.exe	122
PID 880 wrote to memory of 4576	880	Banner-And-Zero.exe	123
PID 6016 wrote to memory of 5508	6016	msedge.exe	124
PID 6016 wrote to memory of 5508	6016	msedge.exe	124
PID 6016 wrote to memory of 5508	6016	msedge.exe	124
PID 6016 wrote to memory of 4392	6016	msedge.exe	125
PID 6016 wrote to memory of 4392	6016	msedge.exe	125
PID 6016 wrote to memory of 4476	6016	msedge.exe	126
PID 6016 wrote to memory of 4476	6016	msedge.exe	126
PID 880 wrote to memory of 6660	880	Banner-And-Zero.exe	127
PID 880 wrote to memory of 7028	880	Banner-And-Zero.exe	156
PID 880 wrote to memory of 6632	880	Banner-And-Zero.exe	136
PID 880 wrote to memory of 4952	880	Banner-And-Zero.exe	199
PID 6016 wrote to memory of 6904	6016	msedge.exe	131
PID 6016 wrote to memory of 6904	6016	msedge.exe	131
PID 6016 wrote to memory of 6904	6016	msedge.exe	131
PID 880 wrote to memory of 5732	880	Banner-And-Zero.exe	132
PID 2856 wrote to memory of 4240	2856	Banner-And-Zero.exe	133

C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
"C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:880
- C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
  "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2856
- - C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
    "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 2
    3⤵
    PID:6044
  - - C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
      "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 3
      4⤵
      PID:6976
    - - C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 4
        5⤵
        
        PID:6740
      - C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 5
        6⤵
        
        PID:3012
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 6
        7⤵
        
        PID:10168
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 7
        8⤵
        
        PID:12088
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 8
        9⤵
        
        PID:14548
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 9
        10⤵
        
        PID:6944
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 10
        11⤵
        
        PID:16184
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 11
        12⤵
        
        PID:17048
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 12
        13⤵
        
        PID:21836
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 13
        14⤵
        
        PID:2760
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 14
        15⤵
        
        PID:11612
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 15
        16⤵
        
        PID:24580
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 16
        17⤵
        
        PID:24768
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 17
        18⤵
        
        PID:14076
        
        C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Banner-And-Zero.exe" 18
        19⤵
        
        PID:13952
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        18⤵
        
        PID:16944
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        18⤵
        
        PID:7828
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        18⤵
        
        PID:26112
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        17⤵
        
        PID:26168
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        17⤵
        
        PID:12028
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        17⤵
        
        PID:14348
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        17⤵
        
        PID:27368
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        17⤵
        
        PID:9116
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        17⤵
        
        PID:19416
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        16⤵
        
        PID:25232
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        16⤵
        
        PID:14908
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        16⤵
        
        PID:26084
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        16⤵
        
        PID:6640
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        16⤵
        
        PID:13744
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        16⤵
        
        PID:7712
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        16⤵
        
        PID:17160
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        16⤵
        
        PID:25056
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        16⤵
        
        PID:14504
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        16⤵
        
        PID:8112
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        16⤵
        
        PID:23736
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        16⤵
        
        PID:10468
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:12988
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:25316
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:12396
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:18680
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        15⤵
        
        PID:26264
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:24648
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:11192
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        15⤵
        
        PID:9992
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:14176
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:13532
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:15484
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        15⤵
        
        PID:24900
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:20976
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:17060
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:27252
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        15⤵
        
        PID:8600
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        15⤵
        
        PID:16612
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        15⤵
        
        PID:12352
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:24404
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:15624
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:2984
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:9288
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        14⤵
        
        PID:11000
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:6904
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:12944
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        14⤵
        
        PID:1464
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:10960
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:11516
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:9304
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        14⤵
        
        PID:11840
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:25048
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:26224
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:19380
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        14⤵
        
        PID:14980
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:12584
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:13452
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        14⤵
        
        PID:26660
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:14972
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:17444
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:22216
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        14⤵
        
        PID:4080
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:26896
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:27112
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        14⤵
        
        PID:15988
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:26804
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        14⤵
        
        PID:16616
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:22776
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:23764
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:20296
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        13⤵
        
        PID:19632
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:24024
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:17592
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:11592
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        13⤵
        
        PID:2484
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:16868
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:16016
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        13⤵
        
        PID:10236
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:16588
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:15232
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:14800
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        13⤵
        
        PID:10820
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:10940
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:8804
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:11068
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        13⤵
        
        PID:7432
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:8144
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:10332
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        13⤵
        
        PID:25992
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:13456
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:13984
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        13⤵
        
        PID:13888
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:21400
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:27532
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:25672
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        13⤵
        
        PID:7348
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:27500
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        13⤵
        
        PID:23792
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:27396
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        13⤵
        
        PID:27904
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:20800
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:23448
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:19668
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:15252
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:19048
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:1664
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:8668
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:7332
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:17108
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:8504
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:20756
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:2200
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:12748
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:18268
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:6192
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:9176
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:20600
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:7020
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:11692
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:19316
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:13960
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:22156
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:18128
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:4104
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:13528
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:9096
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:25868
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:1856
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:9144
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:10352
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:12812
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:10684
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:3368
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:22572
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:16444
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:26672
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:18368
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        12⤵
        
        PID:10996
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        12⤵
        
        PID:26328
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:3000
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:20032
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:20120
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:21488
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:18888
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:20624
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:23136
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:18456
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:21752
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:16228
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:20256
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:22080
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:23056
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:9652
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:17336
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:21884
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:12040
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:5840
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:15768
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:15084
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:2364
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:14416
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:17812
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:18588
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:25024
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:8632
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:26272
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:24976
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:20148
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:124
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:23844
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:5724
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:24920
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:15552
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:27628
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:27608
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:7696
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:26716
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:22336
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:12644
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        11⤵
        
        PID:17616
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        11⤵
        
        PID:24328
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:11316
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:17272
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:16920
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:2396
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:15416
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:19156
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:13224
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:12244
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:19708
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:21064
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:20324
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:17204
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:23492
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:20732
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:21480
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:20236
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:15224
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:21696
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:22404
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:18468
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:22196
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:3376
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:24336
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:4052
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:22268
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:13684
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:17304
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:1288
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:14468
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:23120
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:10284
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:24804
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:23280
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:24712
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:25952
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:5724
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:26196
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:20052
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:26016
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:9204
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:25996
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:27088
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:27568
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:25532
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:19968
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:5976
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:10880
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:12716
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:26868
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        10⤵
        
        PID:12884
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        10⤵
        
        PID:16684
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:13128
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:15916
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:12188
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:14384
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:15448
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:8992
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:13184
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:12336
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:4012
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:11080
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:17548
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:18608
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:16928
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:12576
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:20420
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:17720
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:20104
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:10376
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:18064
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:19524
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:21644
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:21040
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:17480
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:23392
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:18316
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:22012
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:23928
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:11312
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:22852
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:9768
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:21320
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:9264
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:18156
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:20380
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:23912
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:21784
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:23184
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:18332
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:11340
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:15264
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:21032
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:10028
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:8904
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:25444
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:25964
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:24172
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:10336
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:8232
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:16992
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:22312
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:7432
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:13064
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:4236
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:26780
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:11868
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:12796
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        9⤵
        
        PID:4956
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        9⤵
        
        PID:25084
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:13636
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:11544
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:10492
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:14128
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:14748
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:12368
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:15928
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:14204
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:15652
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:14752
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:13860
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:16224
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:6096
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:16764
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:18356
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:17524
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:8960
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:19148
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:14292
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:20408
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:9000
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:21280
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:19852
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:19484
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:19636
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:21968
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:10992
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:19724
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:15456
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:20948
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:23280
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:1996
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:14404
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:24160
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:15060
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:9312
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:22064
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:21480
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:20184
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:22460
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:22700
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:3184
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:15496
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:7848
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:7388
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:11348
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:24788
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:12580
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:4928
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:23780
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:26504
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:14368
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:16960
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:11748
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:14028
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:9040
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:26992
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:26972
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:21044
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:17680
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:15448
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:27312
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        8⤵
        
        PID:15700
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:21288
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        8⤵
        
        PID:1544
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:4936
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:12576
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:12608
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:12808
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:13200
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:11416
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:9792
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:4352
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:11704
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:13996
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:12064
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:15488
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:15844
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:12408
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:11376
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:15320
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:13240
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:8852
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:356
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:11512
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:18168
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:17096
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:18800
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:18952
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:19544
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:20188
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:21488
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:20580
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:12536
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:23352
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:20056
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:20532
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:23260
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:17080
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:23368
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:9756
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:22980
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:21848
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:708
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:18964
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:11688
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:23904
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:1032
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:9892
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:9964
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:24264
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:7684
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:10012
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:7288
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:18552
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:20852
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:24644
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:22796
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:25576
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:24916
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:24836
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:4328
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:11204
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:16008
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:26600
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:16212
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:18164
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:27628
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:27584
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:26464
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        7⤵
        
        PID:12200
        
        C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        7⤵
        
        PID:9232
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:9848
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:9464
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:10780
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:4996
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:8856
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:4236
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:9548
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:13012
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:11984
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:13052
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:6084
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:9000
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:11636
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:14352
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:14824
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:15120
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:6664
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:14592
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:15380
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:10568
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:11408
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:9860
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:15864
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:16248
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:10224
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:13824
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:16752
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:16976
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:14640
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:16696
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:18700
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:17308
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:12904
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:19848
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:20472
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:7328
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:23336
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:22352
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:22024
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:18984
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:2400
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:23456
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:23788
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:11396
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:22268
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:24428
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:7536
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:4072
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:23632
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:14192
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:4068
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:12684
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:2536
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:7512
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:18780
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:11964
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:25176
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:24944
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:10676
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:26224
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:25440
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:25464
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:9476
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:8936
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:25848
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:12776
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:24560
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:26660
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:12332
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:3128
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:16536
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        6⤵
        
        PID:19436
      - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        6⤵
        
        PID:22816
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:9928
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:9224
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:9964
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:10300
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:10620
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:9712
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:11168
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:10160
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:8360
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:1772
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:11456
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:11788
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:8868
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:9228
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:12832
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:13216
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:9804
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:13480
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:12056
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:1536
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:10480
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:12020
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:12720
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:13528
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:6100
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:8040
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:11568
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:11928
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:8876
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:10480
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:15440
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:4876
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:15376
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:17472
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:10764
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:17496
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:19172
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:15056
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:19664
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:18504
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:21444
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:18980
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:20176
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:21216
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:22048
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:19804
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:9644
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:13644
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:14184
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:7332
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:11236
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:9568
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:21340
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:21696
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:8652
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:17260
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:23328
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:12480
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:808
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:5488
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:17268
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:13560
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:14872
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:20676
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:10824
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:25128
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:21036
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:26080
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:6924
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:10760
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:4884
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:18568
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:11956
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:25400
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:26768
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:18184
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:27008
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:23976
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:9932
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:20372
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
        5⤵
        
        PID:10820
    - - C:\Windows\explorer.exe
        
        "C:\Windows\explorer.exe"
        5⤵
        
        PID:11632
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:6856
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:6744
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:8448
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:6084
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:4736
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:10076
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:6176
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:9680
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:9560
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:8596
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:7856
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:7932
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:10608
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:8240
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:9588
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:9316
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:9584
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:3960
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:572
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:9776
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:11348
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:10060
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:9724
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:12284
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:8224
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:13508
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:13596
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:3316
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:15044
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:12864
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:12932
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:9200
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:9712
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:6124
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:14072
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:9940
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:11636
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:16348
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:16324
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:8216
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:9444
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:16108
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:15112
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:16916
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:11276
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:14936
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:1868
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:20116
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:20472
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:17344
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:17816
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:8464
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:3316
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:22748
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:21716
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:22568
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:12348
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:24016
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:20796
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:20044
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:15680
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:22972
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:22400
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:10040
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:10016
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:8936
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:18224
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:21228
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:6452
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:17464
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:23676
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:10976
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:2752
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:12800
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:26540
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:19244
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:7296
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:25524
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:10220
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:12856
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:26368
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:8188
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:8092
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:27212
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:8708
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:21016
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:8724
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:19064
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:1076
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
      4⤵
      PID:3368
  - - C:\Windows\explorer.exe
      "C:\Windows\explorer.exe"
      4⤵
      PID:17856
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    - Modifies registry class
    PID:4240
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    - Modifies registry class
    PID:6560
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    - Modifies registry class
    PID:1876
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    - Modifies registry class
    PID:7080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:6184
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:7384
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:6620
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:5644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:6928
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:7664
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:7288
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:7568
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:7484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:5760
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:6732
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:10132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:7416
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:9232
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:10176
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:8224
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:10680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:8960
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:11032
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:10376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:6472
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:10924
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:9668
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:8944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:11464
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:12188
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:10392
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:11808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:12836
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:12716
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:12640
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:12028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:10324
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:8972
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:13100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:10892
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:14004
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:13628
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:15656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:1736
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:8988
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:6400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:15696
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:4592
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:7236
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:16772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:12768
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:17580
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:18012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:14360
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:18848
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:8912
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:20444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:19792
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:6952
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:21672
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:21068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:23040
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:11228
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:17960
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:21760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:18160
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:22040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:2760
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:17628
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:11732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:12100
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:4324
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:16860
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:7160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:16912
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:21364
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:17668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:20144
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:9664
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:10268
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:10472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:25256
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:25168
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:24312
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:11940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:6596
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:26360
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:10292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:25552
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:18152
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:26996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:7852
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:25908
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:21704
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:17932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:10316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
    3⤵
    PID:11000
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:24464
- - C:\Windows\explorer.exe
    "C:\Windows\explorer.exe"
    3⤵
    PID:16040
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:4612
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:5812
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:6016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x35c,0x7ffeb1bcc188,0x7ffeb1bcc194,0x7ffeb1bcc1a0
    3⤵
    PID:3024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1996,i,14523893190258025819,13455433456690372657,262144 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
    3⤵
    PID:2532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2336,i,799033283777857896,17568479444670399198,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:11
    3⤵
    - System Time Discovery
    PID:3976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2704,i,5956870216638610437,5923616920209594536,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:13
    3⤵
    PID:3168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3564,i,9767568046577768351,1277212350219874543,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
    3⤵
    PID:2860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,8737090876305013111,16382594121669725986,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
    3⤵
    PID:3472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,3722834076233339210,15991566541999052840,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:1
    3⤵
    PID:4132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4436,i,18304573510924216694,15295405599904278921,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
    3⤵
    PID:2224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,10847109871877429370,2919359046650500050,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:9
    3⤵
    PID:3404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4716,i,5663150016129909267,18347488335151641434,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:1
    3⤵
    PID:5396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=3680,i,8723830033675281363,11570485462990694445,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
    3⤵
    PID:1856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,2689114185211010529,14855522357251924241,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:14
    3⤵
    PID:1876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5972,i,7595057300407111766,11421460210460469321,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:1
    3⤵
    PID:5508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,11229939452616100599,300335107790139770,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:14
    3⤵
    PID:4392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,1528757954929427420,13274180225900931112,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
    3⤵
    PID:4476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6712,i,5461795494204911960,3486927088071309242,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=6768 /prefetch:1
    3⤵
    PID:6904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6960,i,4840381394732354414,1293889272269126068,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:12
    3⤵
    PID:6632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7080,i,767517722139726435,12770230906266875743,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:1
    3⤵
    PID:3756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7304,i,4284958044942541284,15159077668846080554,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=7320 /prefetch:1
    3⤵
    PID:6644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7776,i,5267330051060104533,3299364385027274647,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:1
    3⤵
    PID:4796
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7944,i,13495335809955932136,8246610379335705800,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=7988 /prefetch:14
    3⤵
    PID:6176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=8060,i,12881364697057667642,7996048168941849595,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=8108 /prefetch:1
    3⤵
    PID:7796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8220,i,14009499875256296246,9593593631120990836,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=8276 /prefetch:14
    3⤵
    PID:240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=744,i,1028691712035911229,8470101242787318404,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=8272 /prefetch:14
    3⤵
    PID:7544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8268,i,17785537846331671669,9391096282697684414,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=8244 /prefetch:14
    3⤵
    PID:7224
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7944,i,13495335809955932136,8246610379335705800,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=7988 /prefetch:14
    3⤵
    PID:6700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8476,i,12852169964858059717,6357506074212717722,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:1
    3⤵
    PID:8496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=1368,i,8163022477471629483,5959929752932713077,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=1448 /prefetch:1
    3⤵
    PID:8236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=1400,i,778708835108665547,5534738450994089015,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=8640 /prefetch:1
    3⤵
    PID:7260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=4452,i,13702449407057735090,2265898078456738939,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=8804 /prefetch:1
    3⤵
    PID:9472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8344,i,3498081307191794774,6342112950361527355,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=9268 /prefetch:1
    3⤵
    PID:1208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=9416,i,2471989256722591438,4326768523265185181,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=8328 /prefetch:1
    3⤵
    PID:7576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=1424,i,11133522495715730974,16857837981049560094,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=9820 /prefetch:1
    3⤵
    PID:7248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=10004,i,11535794550902057764,10654663796739029787,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=10024 /prefetch:1
    3⤵
    PID:10708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=10260,i,14840323545655728348,10943966816855581844,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=10276 /prefetch:1
    3⤵
    PID:8860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=10504,i,10055256956787909616,577373002341313687,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:1
    3⤵
    PID:11088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10648,i,10445789873647577738,9297259586582282017,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=10644 /prefetch:14
    3⤵
    PID:10524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=10884,i,12050793244559998487,9237848119929051872,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=10892 /prefetch:1
    3⤵
    PID:10532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9912,i,6283575887820979247,11121191782717973128,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=10836 /prefetch:1
    3⤵
    PID:10944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=11392,i,11711057178373564620,2449657448536318544,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=11412 /prefetch:1
    3⤵
    PID:9384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=11540,i,6971511755471170821,13993791717300602150,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=11588 /prefetch:1
    3⤵
    PID:10200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=12016,i,10855130641001329304,7174721897747353293,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=12036 /prefetch:1
    3⤵
    PID:10752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=12204,i,13869427757363869853,8141804034198251131,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=12200 /prefetch:1
    3⤵
    PID:9736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=12448,i,17712650689974275958,5735984381687612512,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=12428 /prefetch:1
    3⤵
    PID:9496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=11996,i,11087287888276607992,15664323900937569671,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=12624 /prefetch:1
    3⤵
    PID:11832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=12968,i,3041826256829297129,6246006612202555906,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=12980 /prefetch:1
    3⤵
    PID:12036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=13404,i,8476514722032396421,3944121914775033162,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=13424 /prefetch:1
    3⤵
    PID:11056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=13644,i,973178063120556676,709914229642518487,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=13396 /prefetch:1
    3⤵
    PID:11804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=13808,i,12112922747558751828,14564529209220344173,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=13984 /prefetch:1
    3⤵
    PID:12152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=14000,i,12341950151329802686,16931850359998377069,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=14116 /prefetch:1
    3⤵
    PID:9284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=14432,i,6211032173222331313,8174362184317621617,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=14192 /prefetch:1
    3⤵
    PID:12252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=14624,i,3854446115436059037,15831669151546621663,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=14604 /prefetch:1
    3⤵
    PID:13604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=14736,i,15653869054294787480,6976114355010090556,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=14748 /prefetch:1
    3⤵
    PID:13652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=15012,i,10153326219067507352,3804735525870544139,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=15048 /prefetch:1
    3⤵
    PID:14572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=15264,i,5829846328794587327,4587359292320962749,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=15312 /prefetch:1
    3⤵
    PID:14364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=15448,i,8301069949909050547,13517574898696532473,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=15480 /prefetch:1
    3⤵
    PID:13964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=15724,i,907565877523856913,15148499880278142094,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=15732 /prefetch:1
    3⤵
    PID:9048
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=15896,i,2350817665831480887,5209447096198150391,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=15880 /prefetch:1
    3⤵
    PID:12880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=16084,i,11769085011154107792,4485719828622320758,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=16108 /prefetch:1
    3⤵
    PID:10300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=16320,i,12276687372819628413,15740467033652806380,262144 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=16324 /prefetch:10
    3⤵
    PID:13688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=16328,i,9351778652397213720,7979703061487757532,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=16372 /prefetch:1
    3⤵
    PID:6920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=16044,i,18244536446093922516,9747147190050305145,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=10852 /prefetch:1
    3⤵
    PID:8468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=16836,i,3204542558893895002,10449143824918692950,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=16840 /prefetch:1
    3⤵
    PID:11808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=16992,i,1783613413635342280,3602666837702296679,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=16972 /prefetch:1
    3⤵
    PID:9952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=17280,i,5714630464939993378,8633755422341687017,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=17316 /prefetch:1
    3⤵
    PID:940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=6212,i,13856768474686336626,16855599291023485434,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=8260 /prefetch:1
    3⤵
    PID:15500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=17552,i,693757153860548464,5310161894735762816,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=17564 /prefetch:1
    3⤵
    PID:14324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=6304,i,7461382889967722274,1516497117118350291,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:1
    3⤵
    PID:6988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=6316,i,7016504264688306869,7438597589318996011,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:1
    3⤵
    PID:10780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=18052,i,17904844374526018494,11890008368078706730,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=18060 /prefetch:1
    3⤵
    PID:5468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=13208,i,8773335180033673060,10764204790575655911,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=18164 /prefetch:1
    3⤵
    PID:9244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=18480,i,10547511739540307539,12760461255488086476,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=18500 /prefetch:1
    3⤵
    PID:11432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=10260,i,7924288056912548931,2036510687104666304,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:1
    3⤵
    PID:4652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=10804,i,5895303891290324083,18166387117135150065,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=10800 /prefetch:1
    3⤵
    PID:15104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=18884,i,10994575118024559213,15175297938281494235,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=18888 /prefetch:1
    3⤵
    PID:11220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=19084,i,9504762190861959940,4336380266959945694,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=19096 /prefetch:1
    3⤵
    PID:15544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=19428,i,4836496057818941715,15573241003986634078,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=19452 /prefetch:1
    3⤵
    PID:16236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=19432,i,1930961737737691250,3525897274741872999,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=19444 /prefetch:1
    3⤵
    PID:6168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=11560,i,9031838749375626771,11128114008124438433,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=19696 /prefetch:1
    3⤵
    PID:4252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=19856,i,8597129745206133702,6127243916046729847,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=19864 /prefetch:1
    3⤵
    PID:12932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=20228,i,6168683044143806173,10367441336365231239,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=20248 /prefetch:1
    3⤵
    PID:6380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=20460,i,5800780827679965946,5372251907347392280,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=20464 /prefetch:1
    3⤵
    PID:16784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=20748,i,9088329494462630263,15912840598062023498,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=20756 /prefetch:1
    3⤵
    PID:12308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,2501686305583226511,17616923897617435596,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=15296 /prefetch:14
    3⤵
    PID:18220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=10280,i,13932258050458468185,12273000673609102360,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=15448 /prefetch:1
    3⤵
    PID:18228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=20892,i,13180769052050746324,3290114615478902875,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=20876 /prefetch:14
    3⤵
    PID:18236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=21140,i,941106882504773296,8782072816890121589,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=16200 /prefetch:1
    3⤵
    PID:17584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=21344,i,17429144853458634776,2052585748611055118,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=21348 /prefetch:1
    3⤵
    PID:10224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=21544,i,4624629876817626119,4019572729081288240,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=21624 /prefetch:1
    3⤵
    PID:14940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=22048,i,14059868441814962156,2195524344063384171,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=22056 /prefetch:1
    3⤵
    PID:12912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=22252,i,9181904011511201588,7090961604526360715,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=22196 /prefetch:1
    3⤵
    PID:6188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=22412,i,10882765889680217508,14489833137940140975,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=22384 /prefetch:1
    3⤵
    PID:18560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=16992,i,14548036363628320515,9607525648969460473,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=17000 /prefetch:14
    3⤵
    PID:19324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=22832,i,15684723748650815742,1910046950235263175,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=22824 /prefetch:1
    3⤵
    PID:15476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=22828,i,3727629416316886555,8684761873104828248,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=8808 /prefetch:1
    3⤵
    PID:16892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=23112,i,4156766399154656091,4009272374999190295,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=16092 /prefetch:1
    3⤵
    PID:17880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=23092,i,5013536700663271739,823143778257364802,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=12188 /prefetch:1
    3⤵
    PID:13636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=23284,i,16296502823696343134,3136964058156769717,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=23288 /prefetch:14
    3⤵
    PID:18036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=23716,i,6557086117824820463,15757724852047591395,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=23736 /prefetch:1
    3⤵
    PID:18140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=24060,i,11760533418230758755,129724557266040889,524288 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=24076 /prefetch:14
    3⤵
    PID:17648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=24340,i,3852718550809063075,4986783534289542565,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=24368 /prefetch:1
    3⤵
    PID:18836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --metrics-shmem-handle=24360,i,17242033490016129683,3612330242101762626,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=24416 /prefetch:1
    3⤵
    PID:16024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --always-read-main-dll --metrics-shmem-handle=24068,i,3248490060176528037,13950373792406016365,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=18956 /prefetch:1
    3⤵
    PID:19056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --always-read-main-dll --metrics-shmem-handle=24832,i,3355835804110147292,17689535218408690824,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=18368 /prefetch:1
    3⤵
    PID:19700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --always-read-main-dll --metrics-shmem-handle=7368,i,13325190189213516002,17849172737415905004,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=25248 /prefetch:1
    3⤵
    PID:12744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --always-read-main-dll --metrics-shmem-handle=25368,i,11382702999536005445,11176193419693809569,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=25056 /prefetch:1
    3⤵
    PID:20784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --always-read-main-dll --metrics-shmem-handle=25656,i,4621254021537619106,3219996528357135637,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=25664 /prefetch:1
    3⤵
    PID:18948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --always-read-main-dll --metrics-shmem-handle=25800,i,7904355299789672429,1424892690151708693,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=18964 /prefetch:1
    3⤵
    PID:20540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --always-read-main-dll --metrics-shmem-handle=25888,i,9425402155767215408,9995273204170973204,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=25944 /prefetch:1
    3⤵
    PID:11816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --always-read-main-dll --metrics-shmem-handle=26116,i,895247207340785711,11869737547975122466,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=26148 /prefetch:1
    3⤵
    PID:19864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --always-read-main-dll --metrics-shmem-handle=26472,i,7837157362762802509,12598455464969261056,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=26484 /prefetch:1
    3⤵
    PID:2676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --always-read-main-dll --metrics-shmem-handle=26640,i,6248427420202750185,14973231107871621280,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=26668 /prefetch:1
    3⤵
    PID:22208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --always-read-main-dll --metrics-shmem-handle=26384,i,12095871219955537754,5698633367094591850,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:1
    3⤵
    PID:23404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --always-read-main-dll --metrics-shmem-handle=27272,i,14107310495733903301,17886912087361079484,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=27300 /prefetch:1
    3⤵
    PID:21604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --always-read-main-dll --metrics-shmem-handle=27460,i,13659176313935734062,8291326207338144501,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=27440 /prefetch:1
    3⤵
    PID:18708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --always-read-main-dll --metrics-shmem-handle=27464,i,8965307548303078278,1050495270943750969,2097152 --field-trial-handle=2188,i,14541502695362728630,17110015783693435073,262144 --variations-seed-version --mojo-platform-channel-handle=27400 /prefetch:1
    3⤵
    PID:22840
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:5452
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:2216
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:2788
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:4420
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:4004
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:5676
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:4628
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:4576
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:6660
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:7028
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:6632
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:5732
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:7040
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:7164
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  - Modifies registry class
  PID:6944
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:7400
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:7908
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:6692
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:7500
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:7464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:8052
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:6268
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:8476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:7584
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:4976
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:4952
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:10128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:7416
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:8340
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:10348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:7820
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:9572
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:11112
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:8492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:10696
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:9332
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:8156
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:6944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:5800
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:11620
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:12700
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:6296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:1772
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:13712
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:8352
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:12572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:13076
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:15296
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:6416
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:13444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:15388
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:15572
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:5632
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:14852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:14080
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:13004
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:6664
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:12452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:16548
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:16744
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:17564
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:19448
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:16724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:16168
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:13244
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:18824
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:21436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:19696
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:6104
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:20932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:19640
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:21944
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:13268
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:22476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:11728
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:23588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:11624
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:20996
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:10776
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:22972
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:21124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:4084
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:12424
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:15708
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:21628
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:12760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:23208
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:11124
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:25568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:13440
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:4040
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:6408
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:26228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:7216
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:6820
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:26488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:7872
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:7080
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:11572
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:27552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:11792
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:17012
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:16628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hah.imgeeked.lol/
  2⤵
  PID:25500
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:25632
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe"
  2⤵
  PID:22408

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4344

C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
1⤵
PID:7028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:8156

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:12456

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

069ec8a5-c691-44a6-ba65-f811e5c79bed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\069ec8a5-c691-44a6-ba65-f811e5c79bed.tmp
Size 37KB
SHA256 b41f6d94f083ac0123649c49842ce998e8f5f649a837df1815e59d92c8bf66c9
MD5 2e253aa11f0ca4d5c9f58797ba223660
SHA1 91d69523792fec19aa81f89b0e086bf5ed0557af
SHA512 1cbbc7c4b03eb628b493272fe0a0d25a3aa836941a302e3b2c6b4e59f52595af9b8db1f92634a049f308ac5216fbb28847af79afd43c0423b5410bebb54c429f
SSDEEP 768:X/UxvxjgC+H3FTGOySR/9OA9at01j0iq00+Ia2bSHxRz:KZj3+H3F/+CHq00NasSTz
TLSH
T18903C031ECA09D739CF3B384730A63979FF44663C6C56A904AED2A0E01876AD1307C67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

121bfeaa-0edc-40ea-877c-d1bd11853368.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\121bfeaa-0edc-40ea-877c-d1bd11853368.tmp
Size 39KB
SHA256 d3b72819a014d262d92be36bd0f9dac11a5a074f4fae87ed0fece38b7afa2b13
MD5 6decda60934c59ba21b3f505918ea5c5
SHA1 6909a5dc597be1521f417c78154cd0aa81193869
SHA512 9d2c064d5f98577d132e45739dc6d9fda487a9fbb8b3f961ee0a1f2c90d675747dd69cb7af3b05b8b4a58f1b6ecdcfee6824406873c2e83a267e529cbdc80f2c
SSDEEP 768:b/UxvxjgC+G3KMoOySB0/9OA9at01j0iq00+IaiMHS:OZj3+G3KivCHq00NaTHS
TLSH
T1C403BF30BCA59D23ACE7F244770A23D7DFF41523C5C95E9489EA2A0E05476AE1B0BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

185c8983-5884-49c6-aeaa-c523151b46ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\185c8983-5884-49c6-aeaa-c523151b46ac.tmp
Size 38KB
SHA256 7f16292e5228787c472c0d4c7479e910232260736cc7a3a568a2c09ba6a32b4d
MD5 57813c5a4690498e4f7f960e0613aaa2
SHA1 cab2905bfdcd64ce0b6092ebbb4792dc3a7f6e53
SHA512 ae4df8b35d4095c4e951b750b4726716f40dcd3eb43dec4f6a2e285457b3ce631009c619c0d7c03d8a98bda4e82153297ef30a1cc0a6eefd9af9319be4ec2114
SSDEEP 768:QFoL3bwg3IkwIOySBe/9OA9at01j0iq00+IaiMx7lw:nL3x9IZCHq00NaTxZw
TLSH
T11A036B71E8A5DE3BADE3A786B71A73869FE00167C5CD8A84CAD91D0D00871DE170BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33745b6b-75d2-4e94-bebe-78d2cc9176b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\33745b6b-75d2-4e94-bebe-78d2cc9176b0.tmp
Size 42KB
SHA256 8556660e42221e350051fa5fc9ecabf873fd51d552def25cb1dd2d8ca1868e88
MD5 63c16fe032f8da4df0291a0b5c328d68
SHA1 9efc883d882d44390cbf436bade716792ee9e394
SHA512 39ef0c7307e2266e3ca28958efdbba5ed247115ff99099a8d8cd0f8f4f06da090f41de40011ce7371cb337fff61656bb8bd48efaca5130b48f8e836e7c0fd72a
SSDEEP 768:QFL/UxvxjgC+63TwgWxgIOySBG/9OA9at01j0iq00+IaiMHS:dZj3+63E6FCHq00NaTHS
TLSH
T153138C32ECA5DE27ACE7A785B70A7396DFE00163C5C999D4CAE91D0D00872DE170BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b30b31b-842e-4975-85d8-fc75140dbe1f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3b30b31b-842e-4975-85d8-fc75140dbe1f.tmp
Size 38KB
SHA256 69ac201426110e2bb1ad3a207f093e7fdc77d93cadfa2b13b7475862032112d7
MD5 ad277a819d5f0ce4b4c48db98e919f6e
SHA1 477447f0ca91e15c4909cad63f1199f0a29dc021
SHA512 721083a5a94f987029bea0a9aa2996899806225a991c5cb4d5287adad548ec2953ed2c8f8dd46e7c6e0d8fe65bb0b0ec2fa0fa64912bd8f6651f9aed55491027
SSDEEP 768:f/UxvxjgC+G3KQIOySB//9OA9at01j0iq00+IaiMHS:yZj3+G3KG6CHq00NaTHS
TLSH
T11703BF30BCA59D23ACE7F284770A63D7DFF41523C5C95E9489EA2A0E054769E1B0BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b31e559-eb3a-478d-a562-7ffe6404775a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3b31e559-eb3a-478d-a562-7ffe6404775a.tmp
Size 42KB
SHA256 c0f5157caced1f36fbf46e7d2c6a4ca81d35bcb2a477664175fecf2391316d1a
MD5 80d62fff87b6ad87bd79b0a8edd7c557
SHA1 dd4dead71475acff80456efceca2a6a6cb260466
SHA512 2c249d8a35acda5637de50043eb67d3671ae0dfcdbb34d7dbb643bcc1579affb2b9eb569a01482a0266fb6c6b105effe42ec7f986309e74a2adf41ef07a38f51
SSDEEP 768:QFS/UxvxjgC+83TwgWdkIOySB8/9OA9at01j0iq00+IaiMHS:OZj3+83E+DCHq00NaTHS
TLSH
T1CB138D32ECA5DE27ACE7A785B70A7396DFE00163C5C999D4CAE91D0D00872DE170BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

47b3b3ce-2e10-48c6-b488-8009c0e97516.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\47b3b3ce-2e10-48c6-b488-8009c0e97516.tmp
Size 42KB
SHA256 e5fef34545c2b392aad88bc123f101b52405b762a6bfcdad975e49fcaa028771
MD5 8685f93627d45f3b5c4ee29147f1fa0d
SHA1 02e033360ee7bf8c8881134e019db2f4f8943fbc
SHA512 f589ca04c4d05deb290c1e5d0b4980a3e5dae8643056a1dd8c0aab80ac9f60649b091d11cb8e52df802e8d67a727ff54e019db7e71906491e9a0135fbddf5666
SSDEEP 768:QFg/UxvxjgC+13TwgxNqIOySBS/9OA9at01j0iq00+IaiMHS:CZj3+13vM5CHq00NaTHS
TLSH
T1C0138D32ECA5DE27ACE7A785B70A7396DFE00163C5C999D4CAE91D0D00872DE170BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5df887f1-f739-4812-b2a7-131f724ee9dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5df887f1-f739-4812-b2a7-131f724ee9dc.tmp
Size 38KB
SHA256 f921db32c576ba61569c8546f3d1b728a31192b611f77e885458df12eaa621b5
MD5 f8c303b041a20fbe0a52f35962b31795
SHA1 12c20eebbbf541f3674bdd6e719531b4510f0662
SHA512 964b168ce186acb7e747294c00a252c2100afed589537d8a44bcf7fee784bf470b4fa75f7faf561baefba5d847c57702565e4665a89b37abd42a6ef97b223534
SSDEEP 768:d/UxvxjgC+H3QQaOySBh/9OA9at01j0iq00+IaXMSHxRz:AZj3+H3QMgCHq00Na8STz
TLSH
T1DD03C031FCA59D33ACE3B284730A63D7DFF41563C5C65E948AE92A0E05476AD270B863
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

639fb1df-a852-4733-99db-c765d389ddea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\639fb1df-a852-4733-99db-c765d389ddea.tmp
Size 42KB
SHA256 bd6ad41ee3453ef4b752c13ce010f30f66a14eb5c63f514a37f97b1fab62bcda
MD5 8033502d3264952a3f5752045d5c2285
SHA1 37594671ad6493435b2c4ad8208cd1eb0cd57f2a
SHA512 d3272991ae3021071f46a97dd9208916be9db0115b1b3a3bd4df18ac1206c5433e57a007d6f644a5079b0fc2a0568fa73f816f752837a0e34ce1b19590843f04
SSDEEP 768:QFv/UxvxjgC+U3TwgWJyIOySBG/9OA9at01j0iq00+IaiMHS:3Zj3+U3EYFCHq00NaTHS
TLSH
T19C138D32ECA5DE27ACE7A785B70A7396DFE00163C5C999D4CAE91D0D00872DE170BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ee30c83-9445-4249-8082-e792d80a1ccd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6ee30c83-9445-4249-8082-e792d80a1ccd.tmp
Size 37KB
SHA256 1bbca3502fa96e40b04d7a453632986fdbf65e32ab632bc1131c74e9f514d3f7
MD5 da446a0890b021f17fa0577c4bd34a83
SHA1 b8863fa9b113fcd8e6391c0eba8e77a756a8b942
SHA512 a49c96d6487c044ea31f7030f1ff28e173c06ffa06a77b3642c46f3f58c77992c52d135817f7601b0ea6870fc4853fc980f994902a78f6f9a6cb7c86aa7fcbbe
SSDEEP 768:QF++3bwg3TLIOySBa/9OA9at01j0iq00+IaiMx7lw:1+3dltCHq00NaTxZw
TLSH
T141036B71E8A5DE3BADE3A786B71A73869FE00167C5CD8AC0CAD91D0D00871DE170BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ae40b89-c23d-4bff-9247-fb377ba085af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7ae40b89-c23d-4bff-9247-fb377ba085af.tmp
Size 42KB
SHA256 32e9a832716b710b5e8cbf0509fa0eab05c9d366b2242af04608124a014a8a60
MD5 cf3cf943df89f7cee1f7ca775f4e73c6
SHA1 0d3d644e5c71ce3562990fdd4d933824a82e91ba
SHA512 b9139a3ee5971e74d8450cd670e688b8a538b27e635c81587a93820df144339bab7a1dd990dc86c991be4c161bf25614edd6b70a12869944f42c9b0193ee45e4
SSDEEP 768:QFv/UxvxjgC+63TwgW48IOySBS/9OA9at01j0iq00+IaiMHS:TZj3+63E55CHq00NaTHS
TLSH
T1FA138D32ECA5DE27ACE7A785B70A7396DFE00163C5C999D4CAE91D0D00872DE170BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7eb6be07-31d5-445e-8419-bdb8e6f5a6b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7eb6be07-31d5-445e-8419-bdb8e6f5a6b9.tmp
Size 39KB
SHA256 487ddd83dab1219c7e50c6ae7a9a35138cac54ebe82bc7f545ec7150a6705190
MD5 71718c0c25dc2d643d52cd6a80148eef
SHA1 1430de436e8b9cd8c3b3c3fb02ab0ca95614edea
SHA512 14c91e88703eeee51a3eb374cef9d4cc39cc2d20012e314726237ae06535e33837931da05d6efc5f0e01b93e4fb2f964b0afcdc22afb35575cd11fc0bbf31b5e
SSDEEP 768:L/UxvxjgC+H3vToOySBh/9OA9at01j0iq00+IaiMSHxR8:+Zj3+H3vRgCHq00NaTST8
TLSH
T19403CF31FCA59D33ACE7B284730A63D7DFF41563C5C95E948AEA2A0E01472AD170B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0d0352bb5f4b47f3d1ca8042212dfbae37957031d48d7789bd6cd7b4b6cbbe31
MD5 32b3e4b238ee2f76e0152ca1b1ff9944
SHA1 78d56bdababf57c069ac4ad713ad9cdc3e3f04a0
SHA512 3e7b72969f35c769b07f0760fb1a06022e37e68e88be1bff45e02463b5358a671e4f84f6bad11b043a01370573d062084b864866961ee86cb12eceb980874f69
TLSH
T178D02B3A71584E13E0805274007011613892F405EF0601C01322581609902483011184
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc0a38b9bd67def6f8a6da7a4a5956bc201e5aac4ba6f906946e52f5b14e13c2
MD5 1f96c275206494cbaa7386b7e675b940
SHA1 e11ab12226c05e6b54c67a266c2f75cfeb24b04a
SHA512 a117c9e9ceb3447431daa46611f5c54ed75796456b4251af5e1ed3f62b5c6cbe9ebccf949569237178ca2ca7feba8c9acb69940a8457c36a9156ef8fd98eb09c
TLSH
T188D02B3671684D13E0805278007111613882F405DF0601C01322982609902483010180
MD5 SHA1 SHA512 TLSH

Submit Download

18a439d8-100a-4ded-9805-e91a91e55615.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\18a439d8-100a-4ded-9805-e91a91e55615.tmp
Size 12KB
SHA256 62ac1d5b8d5e8ba95756d9cedb0eb6dcbdaab38b64aacd4801fa21983201f194
MD5 d8e8f4bbd13a4da091a306c6ab7973ba
SHA1 41e66770cf019f9e88b9de6807571f532fb5a0a5
SHA512 852605dc2888c8a8187cb3356a2d0554458f737ebae9513a6ed05c0462de26ecc3e3b050b5043aa61e8027538e440fd97fc81942d772bd684442001a55ee9050
SSDEEP 192:sxRGRLCz/fts1yiGozoA8pEX/g6+WNH8bxhYo4gFG31FkIgDjFXJ:sxRGIz/fts1yvK/5GhuEnj
TLSH
T16942B816AD28AD3B9CDBE219FB15BF53E2F9502250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f045231-b3d8-4b1e-9d91-a9fd7d85c7ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1f045231-b3d8-4b1e-9d91-a9fd7d85c7ef.tmp
Size 12KB
SHA256 c3eba90e07e228d3cb0c3acc298d8e0d8c87553a85348e177b6f5b2605f64c1c
MD5 64c3b4d84fccfa1d857cc8f3eb842b14
SHA1 2eeaf193d2b0dc70e25f629ee2fdfaf21b305a93
SHA512 02a8bb2bdb2481f2f0b6cd7023942ce2dcfcbe150b27e0ae57a547077a47cdd0efe4ab2c68a554067ef3a52fe2907552e22538d15a1b1a9726462e729532d089
SSDEEP 192:sxRGRLCz/fts1yiGbzoA8pEX/g6+WNGobxhYo4kFG31FkIgDjHXJ:sxRGIz/fts1ykK/55hiEnZ
TLSH
T13242B716AD28A93B8CDBD219FB55BF53E2F9102260D11F48ABFC9A1C04E76DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

34d59fc3-c2b7-43a4-aea5-8ffac9636eee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\34d59fc3-c2b7-43a4-aea5-8ffac9636eee.tmp
Size 12KB
SHA256 3d18c0b0b75c5d63a87d9ad6346d446abc8b35514bd14d0711b2ae892ee7da90
MD5 dec5f852f23963b7fd0035c4df4deaf7
SHA1 b2eb5d0c44adb2596eceb91e275aaf848bc036a2
SHA512 ed74143dca11e612c758d272dc63f67f5d9986fcde44da4a500b0424272721b2654cf160481a50639cc199281f083dc609a275e1faf308e9683be1987aae430a
SSDEEP 192:sxRGRLCz/fts1yiG7zoA8pEX/g6+WNH8bxhYo4gFG31FkIgDjFXJ:sxRGIz/fts1yIK/5GhuEnj
TLSH
T14E42B816AD286D3B9CDBE219FB15BF53E2F9502250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

486a12ba-0172-431b-8612-32286d97dd2c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\486a12ba-0172-431b-8612-32286d97dd2c.tmp
Size 12KB
SHA256 e57006e6ef0d3d05e98faf8c39747a8ac130b3f889d61fc44d3cac718152ec3b
MD5 10c79ab31989eca972f1198ccc6189cd
SHA1 bfa487b87882fff2c5f739baa4870ca8880de40a
SHA512 e0c5207510befda5a71bb1a11f98a14c381481e1a52f20fd65a4f51c91b24dfbe33052a9ec7b94bca1e26257a343c4e9418587d62a71f748546423cbe809cf51
SSDEEP 192:sxRGRLCz/fts1yiGrzoA8pEZH/g6+WNtZz19hYoOTQFG3wIgDjHXJ:sxRGIz/fts1yQEH/5rZ9hCBMnZ
TLSH
T1E642A716AD28A93B8CCBE219FB55BF53D6F9503260911F48ABFC9A1C04E76DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48970d4f-0129-4de2-a22a-92e0d9546d0d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\48970d4f-0129-4de2-a22a-92e0d9546d0d.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

48f5604b-1796-4575-b20f-e7dd09ac0f8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\48f5604b-1796-4575-b20f-e7dd09ac0f8f.tmp
Size 12KB
SHA256 56609f90f3854973f9d22136dc2529170e39ce4124f944ed7d5a5833e7d4a63e
MD5 17c99104041b3cca7019a59de00ee19a
SHA1 6e43132541bcef5da63a8116864246b0953e2e25
SHA512 eaa29b5ceb044788d8aaf48cfe7382b921dacf0814cd1a8af0ab118fdb2ec2ff08a5ba762cd989226818425f785324ca3cca57ebdc9ef4898e0f4bc1d20debb5
SSDEEP 192:sxRGRLCz/fts1yiGszoA8pEX/g6+WNH8bxhYo4kFG31FkIgDjFXJ:sxRGIz/fts1yHK/5GhiEnj
TLSH
T11942C816AD28AD3B9CDBE219FB15BF53E2F9502250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52afcd7d-1ab4-40e5-b11a-e37dddc1a8e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\52afcd7d-1ab4-40e5-b11a-e37dddc1a8e3.tmp
Size 12KB
SHA256 1e94cc29027a28d78e35968825b126fffb484a390a1221b4006c9b52fef77505
MD5 fea5a76a6c5fedd8a6e58712361dca5c
SHA1 b9073c32ad6ea8639a9213cc249d92576445f4b9
SHA512 b2d963f313a1c3f677cabfd806382737c13a25983959ef0bb7bf991f9e892a1b9ef7e394899a9a99ca781cd46c301b849aed8a9fa7b8488caba1cf2120ec7450
SSDEEP 192:sxRGRLCz/fts1yiGhzoA8pEO/g6+WN4piGb4hYo7kFG3wIgDjHXJ:sxRGIz/fts1y2z/5yn4hBMnZ
TLSH
T12042A716AD28AD3B9CDBE219FB15BF57D2F9103260D11F44AAFC9A1C04E66DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62c3643f-1c67-444b-8ed2-da9d3d2c2de3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\62c3643f-1c67-444b-8ed2-da9d3d2c2de3.tmp
Size 12KB
SHA256 b94238f932587993b2d5659d836f5800609b2c7298ff0bfb2865e148d1ecbf60
MD5 4c04a9be4ba470db941d1f0e9860f051
SHA1 4822a5d36b2ec52612979e9e3d90d3c167c84595
SHA512 d1cf830c1e8228535a889340c9ef37992fb3b258d85feda2467eaa85f8de3d5d505d497513533470342689d40611e15640bab7317810598f80778de64dcda1d6
SSDEEP 192:sxRGRLCz/fts1yiG6zoA8pER/g6+WNVg4zEHhYoOkFG3wIgDjHXJ:sxRGIz/fts1yRU/5z4HhsMnZ
TLSH
T15C42A716AD28A93B8CDBE219FB15BF53D6F9103260D11F44ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68e5dc3e-70dc-450b-8313-dd5750b14c6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\68e5dc3e-70dc-450b-8313-dd5750b14c6e.tmp
Size 12KB
SHA256 2f063f60d3454e1348dbf7ddd029d06788a3656c2b58982ef8fb0340a01909e5
MD5 fa0d8c9616fa1db58c9e38e87caca311
SHA1 b48205a23a2442c66330b5010dc1147dc07b50f4
SHA512 7ad31c91976bd5691d42c0e50a7e1a32763ff0572dd4adb854ab1d8a573cbb7705915aaaf20be68d94b92361ee3db22b5f29f7a8e26828eaf2f0d8f439d37450
SSDEEP 192:sxRGRLCz/fts1yiGxzoA8pEX/g6+WNGobxhYo4kFG3wIgDjHXJ:sxRGIz/fts1ySK/55hiMnZ
TLSH
T1E042B716AD28A93B8CDBE219FB55BF53D2F9503261D11F48AAFC9A1C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

705de953-02b8-4361-b277-bc36bc81e80e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\705de953-02b8-4361-b277-bc36bc81e80e.tmp
Size 11KB
SHA256 45d999e6bdab57d6620562e0e6c5526c13c81d630e7b0333fd512fd38d030de6
MD5 632a9b3f7287469a04913f3c230868b0
SHA1 b5b8d93822c6b2844d7efdbd61c9fb8fa2374d9f
SHA512 84d68a104415def64da9753d4e615b1364b121b189db538de9935a5f0c09df7b905c856ce97589d3ef313c2f80d9263037a72b9f9a898a9ce8fe6f7f8ed4b6ff
SSDEEP 192:sxRGRLCz/fts1yiGGzoA8pEB/g6+WNtLnhYoOFG3wIgDjHXJ:sxRGIz/fts1yZo/59hLMnZ
TLSH
T1D342B616AD28AD3B8CCBE219FB55BF53D6F9103261D11F48AAFC9A1C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

787d3b51-63b5-44fa-8e85-b0a5ba4576b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\787d3b51-63b5-44fa-8e85-b0a5ba4576b7.tmp
Size 27KB
SHA256 628460bb3e745bc7abf85b093c51c1a7e5b9704591192a017d84501ef3fc65c5
MD5 22ade4928b84fa7891cdc62351f5fa37
SHA1 644d6b6a67e6b2134bd0b2631a3cc253c603547d
SHA512 65c91385341b5789bb79a3308ba0d3661e7900a5c674f9941c3657fb3ae19b725f5452e8a63b9513a6e8cb1f33d5c032ff99a6e9b60453e798a2227990c4b30f
SSDEEP 768:p/wW+O7pLuLbOnWg/Xf1p8F1+UoAYDCx9Tuqh0VfUC9xbog/OVnH3IvroV7jG:p/wW+OEbOnWg/Xf1pu1jaUXI8V7jG
TLSH
T193C2D93B740CCA7F4F904ADDDC197E9B6DA802CB5698CD9047FA981C02C6BEA52164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b19efc8-147b-4763-b8ba-384a0b7eff53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7b19efc8-147b-4763-b8ba-384a0b7eff53.tmp
Size 12KB
SHA256 66a0d588aacba9549409f760b70ee51aaed600dd2f34e839fa2b1b0fbcd1a586
MD5 3dc39b576c079a2b6ef8c061e6e6b63e
SHA1 14c79aee146f3f214f2afac712f700664c6ffe42
SHA512 e6ee292e648978ae8c3dabfd654dccf9ca90a329f1518e21399480e43094c25c63cb4bb00ac3d350e16a9a26902c298b0a48c29b7bfdc98193afd4b6c034cd6f
SSDEEP 192:sxRGRLCz/fts1yiG5zoA8pEX/g6+WNGobxhYo4kFG3wIgDjHXJ:sxRGIz/fts1yOK/55hiMnZ
TLSH
T14642B716AD28A93B8CDBE219FB55BF53D2F9503261D11F48AAFC9A1C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81241984-4677-4324-b068-4ad105a491fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\81241984-4677-4324-b068-4ad105a491fe.tmp
Size 12KB
SHA256 682b65e602e8e27bb2634695fc1768f83c036363e9b77ac9b891c00c71811cb5
MD5 14b495b66bfecaa4593a86e9913f9d4a
SHA1 863d92668a2487f6de6b9f60a215f18b174a99a2
SHA512 f92f7d15fe531587f90409def2c4b4dd6d8bfb79713a9c3f0f167b96414186564055fb073282dae5476e52c35b20076eca080a9028c90814502fa3f1ada3e2db
SSDEEP 192:sxRGRLCz/fts1yiGozoA8pE1/g6+WNtcLhYogyFG3wIgDjHXJ:sxRGIz/fts1yjY/5qhyMnZ
TLSH
T10642A716AD28AD3B9CCBD219FB15BF53E6F9103260911F48AAFC9A1C04E76DD520781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

85337808-c1fc-41be-947e-a9e17c9468a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85337808-c1fc-41be-947e-a9e17c9468a4.tmp
Size 12KB
SHA256 bbced9010943c18cc39c48526f6dcd17d90b9eb4d9e1f879ed53e6375d5d7fe4
MD5 15a4ca430acbbfaa5b98d92468453e21
SHA1 ce73926c4978449c9179d8bc993641631e5f5232
SHA512 3a6121b03d174f1c960c5fbe2d17836f3f0cbc1c9132f5c01b38ac28b46d4e1073c168756119ea9b0bbfb3b8f0ea78715cdfdba2f4d70e9e13bde811e3bb0273
SSDEEP 192:sxRGRLCz/fts1yiGgzoA8pEX/g6+WNH8bxhYo4gFG31FkIgDjFXJ:sxRGIz/fts1ynK/5GhuEnj
TLSH
T10842B816AD286D3B9CDBE219FB15BF53E2F9502250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8cffe5f0-64da-4d0c-8570-b38f49446972.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8cffe5f0-64da-4d0c-8570-b38f49446972.tmp
Size 12KB
SHA256 cf2f0eaa67db777a596f3badc5cf57633af4b8d6f6e066d88bc7df10033f2573
MD5 e3ed6c89516fa5a5d272791bf33fd564
SHA1 1a289c313898c4671ab891e15faef53869a8c0ec
SHA512 99be111b82016e1c8acabbf8f8c28e2a0890a1a7d0e71d48008446584ba30752d8eacb3898afd2fc6bcffd9bb8d1290462f42b954108741941afde50c23c4a75
SSDEEP 192:sxRGRLCz/fts1yiGfzoA8pEX/g6+WNH8bxhYo4kFG31FkIgDjHXJ:sxRGIz/fts1yAK/5GhiEnZ
TLSH
T13742B716AD28A93B8CDBD219FB55BF53E2F9502250D11F48ABFC9A1C04E76DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93f11163-c035-4ba8-a6c7-2d5f774b9223.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\93f11163-c035-4ba8-a6c7-2d5f774b9223.tmp
Size 12KB
SHA256 4f4c0080da9e31f72fdd070f316a7b405f0c2349bfe89e232d35d0c7cac8a7de
MD5 26274e9cb12af355bd8e48d3f9aa8b93
SHA1 26c1b4b9e71d8f52ab5b80df9d7ee24e576def2c
SHA512 1822b3565fd5b01ae3a0cc7ff8157b030feb773174c4c7b0e31e4c690e0e8b81999b9c54dce161def9665c82d05cadc2c6eb04e632f131fbbbf995aff39d8e73
SSDEEP 192:sxRGRLCz/fts1yiGnzoA8pEQ/g6+WNfTbp1hYo2kFG3wIgDjHXJ:sxRGIz/fts1yAh/5jhMMnZ
TLSH
T1EC42A716AD28A93B8CDBE219FB15BF53D6F9102261D11F44AAFC9A1C04E76DD520780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 c25c4df0da447f946add0ff7fcb26e456212b47c5ea71a1bf9bdfc862b132bb2
MD5 1640d23b9335263a4a50fd35acfa8be8
SHA1 5c5356d7cc62f92a03356924f39b7cbb8afd0803
SHA512 52f55ee595b8fd0c6f62955551065c48ec2d7179e4d5860b7cfb659f1daa894eb6c033b88afe31c32e5667b7d55b1441122dcdad724564fbe71c452ffec50d82
TLSH
T1E0E07DC505C8C23EB708748781AC730CC399762FE3C8A90E7F04C5A47909840B2C2790
MD5 SHA1 SHA512 TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 281KB
SHA256 2d65c7fc75c71d0fa608b6bb0725a3937611bcc64e040c02368daf3d39dadc2d
MD5 a83ebb7f46d688dcd0e728db0fdb789a
SHA1 cdeb5fc19dc3a59a659389315e9ad3782a92f03c
SHA512 11a30b0e7d4fc8caa4486beb0dd338c12f71146a925c54157c8aff5862f4da5d18dff533f98de15fd643120db1ca4ed28716b6fec18faeaa169282f8438298d8
SSDEEP 6144:OhUbXYlf3kDL0+szxsHJ3kQsDlySYAsBAEVJqqFyTgU0oJl:nT4f3k30+sze3krDESHsBAEqKVf+
TLSH
T1A454236B152A7B87E4AFFD4242FB0FFE749D22514CE07980384571A73DF9AD07AA0854
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 420KB
SHA256 93f4d77d80a74526c0a14db8dfa0639b5bed671ce49592f42b8e2d85730f45e8
MD5 5613721a53109ab86b7eccae8cb4918d
SHA1 25c23a41714a1e5b1a8f97534044df02efa4210b
SHA512 4ad4601c808a4498365717ccda88aacb4bd6081f96a300c22364f74d0a0a99f0e886dd9c95f11cf9b0f6b3f3c456cfe125faeac4827b3df2e6c7c460a089bb28
SSDEEP 6144:sZMgiyqc5oBkMT6S0CMxDgcclQQ6n78kO/4K1lZzLrw0sLEt09ZsLtWaHRf0CCFq:EapBT6dXcp678D1vjrsmtZ2lQIUT
TLSH
T1CA9423678CC596A10C57868F74F92019C9250C74ECE0B6E02ABFAF8DF2416FE05B7972
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 781KB
SHA256 320a313c0cf62a624e7cdadb541d06e856578e88bb013c0cc82b791ade3068c7
MD5 d28d3c21f9def546eef9f374bd472556
SHA1 778b523a9bb23aeba576455081e895f123ab71c1
SHA512 9a2e143f35c4a9bf3639cb79a5ebd39b61c8e85c613241938b333f91be27a48e2b60ed4ddecdea53b66589beaf92ee819ad1058167174a2c6b1832f2270cb367
SSDEEP 24576:F/UHS5uo8FUIj/t2/zRz8vPogCg1LwcSYl065Bg61MGsb:F8HH1/tgzRz8vQC06TJ1s
TLSH
T12E05232EE2B97A04E21A57B431B90B7B56E504625FE8F030BF9C3E44589541CB863F9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 871KB
SHA256 53c0377d17addf3cd903fc5d8464391f75a9f7d36e1f17dd81bb02ec6b878dc7
MD5 578bf091986b1f5004d8c4e7f3a727ea
SHA1 54134f4731ec4b629e9a275d918294964f0ab625
SHA512 02622a49573c1a31706b86c5405bba13e59a94b23d769dccf5d1e1c0be879238260a60cdff6c4de2b35f25c7c4869cdb38a8f9cf1c7b55722bff9d8c74ff3318
SSDEEP 24576:HqW+RUetxUfdYBMlnlqgw2ZD5a1Z6gVUd3uTgCr9rvUO:HKafdYqn0+U1jm4cCr94O
TLSH
T1EF15337CE24E857720000BC648B3DF8AC5B6E8E13E2F7856F4ABD6F17265B45C16E148
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 1.9MB
SHA256 8f3253351d0e2ae71a2171f1290e7dbe7aacc5c77ae5f371151ac183bce0221b
MD5 85780bd5d4b214f52fc1a211fd271d3d
SHA1 140a4c1d59428da20bf1373c99102b7611915e27
SHA512 4c607f79c2e63f345a05c6d7e4092c29c2b9bc120591c42ddc0a0971920bcf7eedf579c06acad9b1f53199dc84485116239f2ed77864045f6b858acfdf236f1a
SSDEEP 49152:tSFTRucUqKRrz2x9dpC9OmYmzLpYTinfFRC:wRPfKR3QhinpYTCS
TLSH
T13B95333F1BF9B6A150923A7EF11362039B6856E7365B4143BA31B6006B133FF605E9B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000069

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
Size 775KB
SHA256 b621ae73838f74fd08c2564859f8b1b4ac2c0ed21aedaf4c5364a67c25be1f85
MD5 75db5d4940588c00bf5ae5624b55ca69
SHA1 dd68ab9101ff941f762cbe5554732f86e7930e0b
SHA512 bdc9a88e47d7b96f66930f7c13f7fb5b56bdb3454df9b2958994f857207beb50ef890ee6cf0044f2869b808ad17087bebd228ba2b3af72022792816806d70680
SSDEEP 12288:dnlAJi9nN5ij/KLwTpZDz/b1POH4Rd5mTWFBSV2r0j+sqFRfjfgX5Ld3P5x5au:oinaj/K4hzxWYZmTWFBd4Iju3P51
TLSH
T10CF4236AC375B40CECA6A43184D52312B9E7EBF83583CB479512F83958393939F26AC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 4.6MB
SHA256 488f3707102946db5fddbed467a3fbfbd000d230aa67900b396f886d8b32957e
MD5 3919cd3c4dfef770fbafe8678ed7038b
SHA1 ba9dda9fa2b4d2ec9bf28f56e01dc280b49047a6
SHA512 f12ccd12d455ff0ef3b8a8c25d4b84f8543ab8695f445cf1d0b7c80430bf2deef4c347dc380fa69b07cb32614627848a1e04c5ddf333a557218372e87a43955f
SSDEEP 98304:+D6buUKc2VEailMf8zIfqvHsM9NRvUnQa8Kn75SKJCgd5H2N6n3rH3f9O:+DPHea9asM9N1UnQ/Kn1SKZPH2U7Hk
TLSH
T1EC363355C73114A3DCFE0230D1C5572E36F6B77B3A1A034B1618697668F0BCAAE0B9DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 4.4MB
SHA256 72b1f9cb426eb39f0f33e0664b08c61fd7cd4de522bdd83e8aaf4d0e56c7a19b
MD5 5294b6b9a9440a68cea91be64d51d0ca
SHA1 6d75de6dd5a586201204c1f793e459fdee7e7a91
SHA512 2ce8e8239f469352da5118e90993f916e94adebea8b129a136d8b3b46e17e52f87f7e1dfb75c47a343effc1c1fd42fe55650f02650215139568bc3fb945f3a7c
SSDEEP 98304:P07XCDgGvzGWfcYkg2pQ2RwHwM578Gd7Sw5BUTZoSe44fW:87XBgZtgp478G9SwUNM44fW
TLSH
T1652633A08767756EC8060D3840E6771034F7AB67ED9BB20F9660214F9852F5FEC98AF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0f0553a153804608_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0f0553a153804608_0
Size 305B
SHA256 2d3f4d6aded207066491704b2f5edcfd0c550a4efa099f3da20c87b74f722129
MD5 0d1c32a3b99b9826f7995543f087bd83
SHA1 66ee2b905f8150f71cdce4d4558345ce5c23ff05
SHA512 4d892e6839bbd9b8fb5975d2b364aacce5bfc444b9240cd1a231f11561ac9d4c1059480945576ac649d97e5907cb8d59c0438ed572068834c8f3563e52df604a
TLSH
T14BE07D8B44C054D2EC0211F9CE5B539F9119105D81A8B0D684179D3256812F0E17A545
MD5 SHA1 SHA512 TLSH

Submit Download

a658fc3862585dca_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a658fc3862585dca_0
Size 14KB
SHA256 a27d49b1db39549d62d0d86dbcdc7eead14fffb88244a3ea13421dc817dc5b6f
MD5 caeb327806412ded67733ca3a18156fa
SHA1 7f04642881e9bf95fe562391e5510edcf6acdbcf
SHA512 a8e6ddbcb8bc17a5303330077d5814a24cc2ed6f1c07a39e0e9f0af39a27b96df825c3fedc9a2072ddf78fb9fd836d4c5386fa1067249061c82156fd14757bea
SSDEEP 384:13WCk4Pxem8nheVOhHDn3qE2fwkNada5xLGzc:1GYPx/8hD56E4pada5xg
TLSH
T1C562E7C3FB42E719DE6223F812438B7B6722C55C5DB6815E11B01B592F8B1FE188E58E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a658fc3862585dca_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a658fc3862585dca_0
Size 14KB
SHA256 2cc2e6a35af91ac3c474556cc6afa93ca3ef737772e9e8b3d69447433065a523
MD5 0156d3399d247dfc444c6a8fab59a351
SHA1 00a7fe088e264084e0ae1d67e2d6f3d561a4e660
SHA512 3b4d1313c738030ae6a5e66480117874381f137ef2e4ec5f99d8889fb1488c38b664daf0528c55216145f5f8a62feb7069cc060b350c5d795e998c47f30ddb27
SSDEEP 384:13WCk4PxecMFJtbQxBfJNqs8fwkNaDa5xLGzc:1GYPxVMrWPCsypaDa5xg
TLSH
T14A62E7C3FB42E719CE6223F812438B7B6722C55C5DB6815E11B01B592F8B1FE188E59E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f35df1d0db04e44f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f35df1d0db04e44f_0
Size 41KB
SHA256 a1dda7b7c968b37a2fede57db1a4d190464f43f16122bdc02c92c0ed921fc5de
MD5 e45402fba981aaa25ef1525f4ede4016
SHA1 bcc858c891f718a4db9e4f917e5b4860c916a830
SHA512 8bb73f30347b8893635de97e3f817d7ad242eb266c1a9071147ed1c443c4702c7dc796ce1af0c36bffe2f2528c39e01e276307b21531834f7a5254347bd18be5
SSDEEP 768:TrMmz4znIGMsnKyTak80CkOUWchxaJ5qTAhmgoaQ/3XPW7KyiD:TrMvznIxsnbT45BcuqTAUFaYnPW7t
TLSH
T145131AD15B547D0ECE2653FA02A28527F375858A3F83E327359163352CA07E79D8E90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 f48dbeba2cbccd67dbaefa8cd7aca7d2c32888f173bfede2c3f4251f767a5dbe
MD5 1dbfa64ab674b096d42c8f7871536165
SHA1 bff358bf3d7527e8bb7ce928fa55d5c8b2158e15
SHA512 f7035656f8471f638546c576d005964cf4361d1d5820cc9ba2ceb6dc549b4dd94a483370a8c00e036a1276a37cfebd8212196c397dabd27ffd125d38d82b07b2
TLSH
T18B618347B7A0845EFF58C430A5CA0C933FB15E9E55A71FA327A8DA792C423A17354096
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 32a191bcc7d824916dbfaf941aca035f3a89f14386ae1795aeb346ecbc0f87b6
MD5 152d8bcdb3a50bc53aac5e971e6038cc
SHA1 87b0c815df98416b33cb68267a48043c593b7f5e
SHA512 d834e3a932752032b3e5da9c66e6208d8fc41f020f53ce283b6223d2986cdaddaf90d44c460cc9e09f6328a2356a8ba15c266049b1ffe3697c4dd2bd462e0d1c
TLSH
T12D619447B7B0845EFF58C430A5CA0C933FB15E9E51A71FA327A8DA792C463A17354086
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 d3a4037e05af7eabbc5fbb37647ff92b82d693a0fc762266aa2f57b89f8985e8
MD5 f8c9a3e611565b404b7c6c3db1e2c637
SHA1 e2ae38f081d18161a4cd255d3b2ef9b5d9227c47
SHA512 51e5d9ce9dd6cf9acb35a5716f5651ea6449d554e323926deb5eacdead2b18ce6cfbb3528cc84ebde93cff3e0d711eaf051276a2e9a161c852a2b960852b11eb
TLSH
T154619547B7B0845EFF58C43075CA0C933FB19E9E41A71FA32BA8DA796C423617354086
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 aaade4e50ceb1979088fabc4afdd54aa24bee5987413541943dca28375e30138
MD5 79fb6a8a6c03092532bc25f5df330403
SHA1 93238f22d2d681d14e4547bbfffe965d589c1a6e
SHA512 a63ea79d03ffbd6a69e2a9931cef182f0353ffe0a9081ca4f752ef694e3099726ee5702643efabbacf88ff884562450d14a8b2ce1265dbe6c82b2158f3d0bfc1
TLSH
T10E61A447B7B4845DFF58C83065C90C933FB15E9E45A71FB327A8DA792C823A17354086
MD5 SHA1 SHA512 TLSH

Submit Download

32f774f6-418f-46ed-8a00-d535d3b3b326.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\32f774f6-418f-46ed-8a00-d535d3b3b326.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

02f1d9fe-c36c-49ab-ae77-babb69e98640.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\02f1d9fe-c36c-49ab-ae77-babb69e98640.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

447bb84b-a589-4c1b-a039-8df15d9894e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\447bb84b-a589-4c1b-a039-8df15d9894e7.tmp
Size 3KB
SHA256 a3ecba2989ea9e1496390b1aaa8c30ca16175236fe22e130019212031540e47c
MD5 3323ad4a7ebff0c351cb1a013e509145
SHA1 dcb9d54ca75090ff38ead1556ebd2ad27127d9cb
SHA512 f3b73322f6884cd73bb8c2a792ae07d59ba3f3c2fd04bfb9088bc8fc05042f7119aabbaa26046bce780bcd579d80fcb69d916816161900c81b8d115b450f0881
TLSH
T1AD51BBF787F8866DDD1192F0AA146F2BCE2D0814422C3C6AC9E4AE17A3E3471E141A4F
MD5 SHA1 SHA512 TLSH

Submit Download

9781d4d6-7182-4912-8a8d-44d91f2199fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9781d4d6-7182-4912-8a8d-44d91f2199fa.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 78b3c523969f70b611fefef33944035b11a00ef114bc93029c094dd95fdcf29d
MD5 316f4ef0575b6e7b3cbeeea4fd684d6a
SHA1 99bd311f552cc59d0b40f031b08007f4823438a7
SHA512 371cd9fc1ce3c0df3d2870a5fc06f5d803c68a467f0f0415d54f10f2ca8ec3ae3b939f4a37d0ef286ca223d14b2e577f3c16bbe48964a37533636062678f2428
TLSH
T1995199F7C7E8866DDD1196F0AA157F2BCE2D0914422C3C6AC8E4AE1B97E3471E14154F
MD5 SHA1 SHA512 TLSH

Submit Download

bc6937a3-0a66-48ba-bfcf-0689dfd40260.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bc6937a3-0a66-48ba-bfcf-0689dfd40260.tmp
Size 2KB
SHA256 972c90f97cb9337ebec505e0de1599bd2061e45c84b7c0b0ab5e33ae17278d79
MD5 a310d1d84c380f7544a147c736a69b98
SHA1 afe96122a610973fbf64c3f6cd4c851609fd781b
SHA512 9e6ed49e709895ecb91eb392ba99c78a5c518f3141aa2dbf984096d138f9542ded26983adb396e3443f2e6242bf460dddfaac41ed507fe7b9219aeab0bc0c54f
TLSH
T1CB5179F787E8866DCD1196F0AA146F2BCE2D0914432C3C6AC9E4AE1B97E3471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ab2bfd3a-ccab-4835-81a2-4407a724ffd7\index-dir\temp-index
Size 552B
SHA256 943fe5217f00595313aacabf6254a2b371bb1e5211d72ccc0f799bebb1468749
MD5 0e6a3192cdb938bf8dc63d13830f9474
SHA1 1f78e44da96ad2d18e05ccd985feac94440880fd
SHA512 1c41127afeaa88fffd30fd395dc022ae7f8716a1b7bf201d83884f7c54d4c81f4d9fd2d928b12e9f989b3f09933144d860dce040289194578211dd9bdd7f199d
TLSH
T114F0ABCE3E124705EC6404B02478A891657A31CCA3589C0FF0FC806A9CD2394AD41558
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ab2bfd3a-ccab-4835-81a2-4407a724ffd7\index-dir\the-real-index
Size 552B
SHA256 3123364518bcd870aa8fde5acf89126e372ae20c10d0b99bbf48e3998fc6b222
MD5 6e5936292d1cd4af1ba8e337f892bc90
SHA1 6c19469b4c2a5f3128b325181ecb1195fe5252f4
SHA512 8260b6079728e7160a68cbb61cf31b0a512ccd9639d8c60f7f29e34ae2777804ac68631bfe55fb2662f07334777b73e5a908b243a834e9c61061c444adaef6c7
TLSH
T1E8F0F19926235741FC0401B1647D76A561711404E3585D0FE2E5546ADC907C4DD416A8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 f93528c0a90a650de263bbad73ebd66eb8f3e72572d6b9f4d9e26c78a3b54a04
MD5 d5d300a8ddd7ebdec86b017298865057
SHA1 748eac86ae6ed7073f1f49f65b2245c9169a4de2
SHA512 2e456f9d4fa8f7d63db701ee8e5fc56e859ae140d12deaff14662612617b4f737fd2b8d58b9e6c11a58253ba061d059abeb63d9f5441931448ca0a558ba8455c
TLSH
T1B7E0C07B3DE7AC10E89FD3E92C3144A046447498EA80DC4F143B99CB30B2322398AD23
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 bf0d65801125ad6438bc2ea8524d4c810f59d123b3fea06984101725ab6387c3
MD5 da0a2102b785c1342dbb1548ebb0deec
SHA1 fce0de445ae400c017b27b9b58a25ceed77f5a1e
SHA512 840aee494af63816024a609b68853cfca1b02991dad8d2adc9a9c3ef21feaebc78a5845f6fb2dcd9f623594115cf65924cbbbcf9403987c3cf3039bb1ee2e67e
SSDEEP 96:KU8oKRaCO9eKGIBHGKsEiq6wKbqcpaKKcSg:a3dDtv61g
TLSH
T174D11370723A0250387D361841D5E72F9A4231633528E62F77EE42A68E7BE4A1DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a273e368-7bd9-4b37-8a8b-aa9dfa453993.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a273e368-7bd9-4b37-8a8b-aa9dfa453993.tmp
Size 12KB
SHA256 2af18692293b381129c0943df5db9e270ae577ed0ffb5e8345ae6a610c8f3dc1
MD5 95eae1b3fe53b9b807f2f727c8b5d878
SHA1 292ca18a1fa9ce74e31128d3485e36c47be925c9
SHA512 ce407c5fd0031562740fe07d4763b8932638659f0a64d1721b80041444bd417b087ea82d2dc5b3ad0b7670864502c7505ff598a8a70991154e0a847e78e4fffd
SSDEEP 192:sxRGRLCz/fts1yiGqzoA8pEr/g6+WNA7onhYo1kFG3wIgDjHXJ:sxRGIz/fts1ydi/5phHMnZ
TLSH
T1BD42A716AD28A93B8CDBE219FB15BF53D6F9503260D11F48AAFC9A1C04E76DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a3e1d6ce-d6ff-46bc-a17f-a9dcff79cca9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a3e1d6ce-d6ff-46bc-a17f-a9dcff79cca9.tmp
Size 11KB
SHA256 be2bfe79dbaee2ba9a33528f8c421e1fb91d02837306d5b683de50e0858bcbd2
MD5 d6ecd3c6c03007f8d9741d95899ef10b
SHA1 d503a865641dcd01f7c948e0c5df67a759e47f0e
SHA512 643307a37fcd07a4c68f312f3e3d0bef0f6df962a5fbb0944fb46624cce91e402138e5bd1567bfc73cda427e0fb22212534e583a8f2d880493cde83acf0b8ce9
SSDEEP 192:sxRGRLCz/ftsyyiG/zoA8p+Y/g6+WNtXVpYoEFG3wIgDjH7J:sxRGIz/ftsyysv/5zpFMnt
TLSH
T11332B716AD28AD3B8CCBD219FB15BF57D6F9102261D51F48AAFC9A1C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0399c4e-f7d9-45e2-ae18-03f8cecf2528.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b0399c4e-f7d9-45e2-ae18-03f8cecf2528.tmp
Size 12KB
SHA256 03ed78db0feb48cdbcecb8945eb0ad9e190f97e38d0b615ace255e144426c5c5
MD5 ad4df9c28b1eb5c3ac698e2a7d68bb9b
SHA1 4c6105925cab856a8133e21ec3f9e306e6f1feaf
SHA512 a4c62b9410ca406fb1476dfa9a2552d3ecaa6aa80a4796b8e00390fd724f37cb307775f632a746e4203b8577dd1618b2a4abf614ca799ae336c484e232d266fa
SSDEEP 192:sxRGRLCz/fts1yiGNzoA8pEX/g6+WNH8bxhYo4gFG31FkIgDjFXJ:sxRGIz/fts1yiK/5GhuEnj
TLSH
T13E42B716AD28693B9CDBE219FB15BF53E2F9502250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5bcced5-d61b-4ebb-8dee-6c556ca9a74b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b5bcced5-d61b-4ebb-8dee-6c556ca9a74b.tmp
Size 13KB
SHA256 a0427b152defeda1aef90f716d3b9a048c9651de63890a4f4b70cccb99006e51
MD5 7e32c821a77335bcb2b1f04266bd9c85
SHA1 a496529ee3656c097501c128de5635a891eb18f5
SHA512 da4a8113f09030bc50ccd93011f8d5a6772b66749198a11cc98e4543d23ade75266cafe58a592f02284eea949c2bd1f418e4d3c165c0c175f5ac119b7dee209a
SSDEEP 192:sxReQUn7RLCz/fts1yiGmJzoA8pEx/g6+WNH8GqhYodnUFGDFkIgDjFXJ:sxRgn7Iz/fts1yvw/5shynj
TLSH
T1B552B656AD28693B9CDBE219FB16BF53D6F9102260D11F44ABFC9A1C04EB6DD130381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be38da19-7137-49db-a3db-e2550ad6a87d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\be38da19-7137-49db-a3db-e2550ad6a87d.tmp
Size 12KB
SHA256 ff464949280b2a631e60235ffc9e9dc26dcb562dc4c1ce73ed56b90541492b83
MD5 38f0f566af955ffe9ae82a1376804d49
SHA1 33cb9ecf627c337b72e7e40286d0419d22247089
SHA512 d5c0508029042a018de60b12ff8965f8cd3ad1f56cabd98b710d3f58c5cb00dbd4e082b3a92c8b3f0db7a38593e4d95d57c27112369e75e1be0c0f68505529a6
SSDEEP 192:sxRGRLCz/fts1yiGRzoA8pEX/g6+WNH8bxhYo4gFG31FkIgDjFXJ:sxRGIz/fts1yWK/5GhuEnj
TLSH
T18D42B816AD286D3B9CDBE219FB15BF53E2F9502250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c8b892db-e44c-4b70-80e4-a96d12e29530.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8b892db-e44c-4b70-80e4-a96d12e29530.tmp
Size 12KB
SHA256 fa8bcd32c04e693cca07826d63be96ca3335284830c5644ed8c3f93930d0d8d6
MD5 1d8ab1f8a84a17dd8f55febd57b91c5e
SHA1 72f91f74e8f116501133b2da24ee4abd15de7303
SHA512 3545559e666f991d495790012b0117ce632fab0db6d24e55d0da7657cf9dd0a7d34d23151faf92b6a7c3e16fa2cac76a20ebabb5caa58ed099031483a7f13d4b
SSDEEP 192:sxRGRLCz/fts1yiGKzoA8pEX/g6+WNH8bxhYo4gFG31FkIgDjFXJ:sxRGIz/fts1y5K/5GhuEnj
TLSH
T10542B716AD28693B9CDBE219FB15BF53E2F9502250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d44a3d2d-f706-422c-81ee-0c2b84362b18.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d44a3d2d-f706-422c-81ee-0c2b84362b18.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d72c4174-8fb2-4457-b15b-8eb18f0699ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d72c4174-8fb2-4457-b15b-8eb18f0699ee.tmp
Size 12KB
SHA256 2bdf1958162fb5af176c43fd21a94ed029a31bf9194ab9583270506094ef3b0f
MD5 ae5e88ddc0e68df33e5a1e49fc0766f6
SHA1 fd0f562bb01209d8d4e67b5c8940f0f613ccf0f2
SHA512 6d5388c5940741d6a1941bf296b3cec40d2610f9a5b53878f07096469bfe32c38d7f15b800b164de5852951a9dea9555f29ed43c3eefbc45a0c3f2529d1427e2
SSDEEP 192:sxRGRLCz/fts1yiGvJzoA8pEx/g6+WNH86RhYo+nUFG31FkIgDjFXJ:sxRGIz/fts1yqw/5HhUEnj
TLSH
T1E742B716AD28A93B9CDBE219FB15BF53E2F9102250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d73832d9-6d6d-4587-b3fe-d4c8ab092987.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d73832d9-6d6d-4587-b3fe-d4c8ab092987.tmp
Size 12KB
SHA256 4799cbcac5488844a77dd937030f27e4df09643d652f5154d90c92886a616c3a
MD5 3b4fc9441d3b20ec0921441a15629699
SHA1 a291c5428d5edad05de465fa4f19de4a30f650b6
SHA512 3132aa39059d7163469f908dda8a6aa5428d2ab5febbc6fc8badfd6dc8e69a8968217e25591e8448352da4d2299fc1afac110bac219a122c434d2fd921687696
SSDEEP 192:sxRGRLCz/fts1yiGdzoA8pE+/g6+WNMvUzhYoRkFG3wIgDjHXJ:sxRGIz/fts1y6j/5xhTMnZ
TLSH
T1F142A616AD28A93B8CDBE219FB15BF53D6F9102261D11F48ABFC9A1C14E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d8c40bd4-9fa6-4b84-8d2c-6b61621602c6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d8c40bd4-9fa6-4b84-8d2c-6b61621602c6.tmp
Size 12KB
SHA256 88fdbcd21ed76ce9ddc026e9f187a601e7ba1ce3b191a74e791462f2bce6d1a5
MD5 56784fa69564a1b42e2d166d82e47ba7
SHA1 05a8f14a19aa94ab89809d43c4a34f6cdafe3a3c
SHA512 9d6c1358a986589620a7920d67967fb24c1c558b3b71411e4fe8c0aeb936ce78c706544a56cb54c0b6a7d5220d09d369cbe6fd093abc6aa049ddc0f7e1294afd
SSDEEP 192:sxRGRLCz/fts1yiGR8zoA8pEX/g6+WNH8bxhYo4kFG31FkIgDjHXJ:sxRGIz/fts1yTtK/5GhiEnZ
TLSH
T14E42B716AD28A93B8CDBD219FB55BF53E2F9502250D11F48ABFC9A1C04E76DD120781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d9c3238e-2a52-41b5-914e-98469975d271.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d9c3238e-2a52-41b5-914e-98469975d271.tmp
Size 12KB
SHA256 2c115612794d141170f1d0bafe18292e7484c9f097d7ac2d1295b257b487a8d4
MD5 69f16bf16f0ec64e2e67055400dd9507
SHA1 89dea6c59b67bca7569108ba77f05a1a27921f69
SHA512 c5e7f716b4e8dc81ffd222073018fd01fc4bac1fec29b2329734bea97bc110a8e2c02adce024e8025b7cd55cb1f89923a9d297c1919aed22d321f416c5a81522
SSDEEP 192:sxRGRLCz/fts1yiGPzoA8pEn/g6+WNvuEnAJhYolyFG3wIgDjHXJ:sxRGIz/fts1y8S/5vf0hBMnZ
TLSH
T1B642A716AD28AD3B8CDBD219FB15BF53D6F9503260D11F44AAFC9A1C04E76DD520780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ece0c6bd-f567-4373-a610-f53232915ee7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ece0c6bd-f567-4373-a610-f53232915ee7.tmp
Size 11KB
SHA256 f1f26683f2fee9ffc55f4c15c88b778deb44c185773238fcdb24136de2f743d5
MD5 c30574d6bb96aac8395b3b8ea93e2d6f
SHA1 296bd5834b0bf9be568932c6990b600172a5130e
SHA512 660e3b8e39be9a6da49f5147f3ba2c81d95f4694ac74aa05f1eaa19415e7c0cede139ab2d3e718be8bc6ccff929aed0ef8a7812a2d76da47371058b0d64e1e3b
SSDEEP 192:sxRGRLCz/fts1yiGhzoA8p+k/g6+WNtZFBYogFG3wIgDjH7J:sxRGIz/fts1y+X/5VBhMnt
TLSH
T1A842A616AD28A93B9CCBE219FB15BF53D6F9103261D51F48AAFC9A1C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3e1a929-9653-4288-ba97-37ec88cbc619.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f3e1a929-9653-4288-ba97-37ec88cbc619.tmp
Size 12KB
SHA256 9c8edc5f20764ac729b728cbb5d6874d710bf130f07e7d615fb34a54451760fe
MD5 088120dbee46e0f509b79d5f18834769
SHA1 6e291406bde9b289c6b65e20f8cca93b3c438cee
SHA512 bc6f65b4924e2d4ec6be533a7edb2eef435989985209af140819006bdd3ffb107272f1e83097e5a05135cadf3b58f21a17a4d9d81173c43fb9f22a0e241abe85
SSDEEP 192:sxRGRLCz/fts1yiG7zoA8pEX/g6+WNH8bxhYo4kFG31FkIgDjFXJ:sxRGIz/fts1y0K/5GhiEnj
TLSH
T1E442C816AD28AD3B9CDBE219FB15BF53E2F9502250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f5068a72-f832-454b-bc8c-370a264d2bf7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f5068a72-f832-454b-bc8c-370a264d2bf7.tmp
Size 12KB
SHA256 21c7a6ef0df0945602d578dc855466842c4b7c48b45be1ac67d2136f79476b37
MD5 90563603e3c45950980558cc7d87bc43
SHA1 a0762af0f2cdf4c179abdfe2801b7965447f4db2
SHA512 29ae0efa540756585028151328de876f04f89acb5a45f521735e8a029f0626dcbc7d3f0124938d2849c9141ce33957c3be4a0540e77965894283e3a6486261a6
SSDEEP 192:sxRGRLCz/fts1yiGozoA8pEX/g6+WNH8bxhYo4gFG31FkIgDjFXJ:sxRGIz/fts1ybK/5GhuEnj
TLSH
T16142B816AD286D3B9CDBE219FB15BF53E2F9502250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f559ad5e-e767-4800-9c71-60149a7d608d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f559ad5e-e767-4800-9c71-60149a7d608d.tmp
Size 12KB
SHA256 7c96e5a96f0417813a3bc50b610d307e006da3dd44527a916bf7c7fc97e896b0
MD5 4f211f3f15f3b736e971b1ad1d88ce2d
SHA1 2f385bcfb4266077d383a002189481a8df54f9c8
SHA512 9218f59c8e9c67f00e722975a9c54f700d3152e936328f0017d4cf02d8a5d6435b546ae56c99dc98a219204973f6863e5a1e73d65f31eb0b8eb96516c9bba659
SSDEEP 192:sxRGRLCz/fts1yiG7zoA8pErS/g6+WNm+TxhYoCkFG3wIgDjHXJ:sxRGIz/fts1yUeS/5vh4MnZ
TLSH
T156429616AD28AD3B8CDBE219FB15BF53D6F9502260D11F48AAFC9A1C04E66DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc7badd3-3925-40ab-ba4c-8f40a24f5bba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fc7badd3-3925-40ab-ba4c-8f40a24f5bba.tmp
Size 11KB
SHA256 7315c5002366beaeaa74427deae0a37587dc9c7c02f288d02b2c1b22b3d53714
MD5 acd3a8c7112a091627bcb83177a233f8
SHA1 0395e748f1182dcdb8838d40ac35dc263d243d90
SHA512 7e4c795fe13b35ac8e4aaaedf3224342865044d767a9399ed1e691b1fcb71cadce9af7a8e14b863f239205c8f590f06219cb3771a72bcbb3f8ad781d13d0600d
SSDEEP 192:sxRBRLCz/ftsqyiGyzoA8p+M/g6+WNt65fYoXFG3wIgV7J:sxRBIz/ftsqyBD/5SfgMr
TLSH
T1E732A816AE68A93B8CC7E219FB15BF53D6F9103261D11F48AAFC991C14E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd380d20-6d99-4f16-ba46-39c59b8eb671.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fd380d20-6d99-4f16-ba46-39c59b8eb671.tmp
Size 12KB
SHA256 2dc2af2748fb014a8008804eac5258ca39a004f55304e946ef6db13407dc09c4
MD5 3f79535aa1b8da1b2af270e2340840d2
SHA1 8c2e7aa4e17c41bd667e790062117dda265a6656
SHA512 1747be047169691335873b9d3a87370977bd682a6b98a5385bc26083270f0c52ed849d505b9ab636d65826fb1ff21b5fd3ccdbf9fa3a1230db261448a8be7fc0
SSDEEP 192:sxRGRLCz/fts1yiGFzoA8pEX/g6+WNH8bxhYo4kFG31FkIgDjFXJ:sxRGIz/fts1yuK/5GhiEnj
TLSH
T1F042B716AD28A93B9CDBE219FB15BF53E2F9502250D11F48ABFC9A1C04E76DD120781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b71f657-b41e-42ed-9146-b8d4b0fb6ae6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8b71f657-b41e-42ed-9146-b8d4b0fb6ae6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

db87e4e8-cf55-4607-8fa1-b514c2566d84.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\db87e4e8-cf55-4607-8fa1-b514c2566d84.tmp
Size 39KB
SHA256 2fca56afebc8ca28dd1fbf4f698da0326119afe02691c4e915513592a6906e48
MD5 7f5e3fb483c41613cf05071f60986e3d
SHA1 056917f4aec2d083b771c1f0353c6db1433e02da
SHA512 dfc5d753f3139baf5f3103eff496bc4a0dc4accbf489f45d47a323b416e63e66e0de60173b666664d817a07530a6b508569892a8694b1c9d6758411faf08511e
SSDEEP 768:g/UxvxjgC+G3djEOySB0/9OA9at01j0iq00+IaiMHS:NZj3+G3dVvCHq00NaTHS
TLSH
T1BE03BF30BCA59D23ACE7F244770A63D7DFF41523C5C95E9489EA2A0E05476AE1B0BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf1a5c1f-8907-4c70-91c2-29eebd57070c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cf1a5c1f-8907-4c70-91c2-29eebd57070c.tmp
Size 132B
SHA256 cf4125d94d82b448cb33d6f462cf53eec00f2ee8165fa00f1b9c3bdba48e3328
MD5 8126a600a3d95922fb651e3a6f104f68
SHA1 e386add1c2c1d9ca74461e5ce0d1b271d689160f
SHA512 5a0e81111f0d9a0f7943b99f7bad8162de0d3f99fffa9d8f8ab466fa9c7c4249808bedfa6e4d26426bc2d1a422e2155900ba71adc222617a5f0880dc60b89a93
TLSH
T122C02B8F542E47CBBAA5152D42D40B3B4690CD60F199E6B449FA5640006435CC608C47
MD5 SHA1 SHA512 TLSH

Submit Download

e365939e-4208-4aa0-84de-3d42fd8b9907.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e365939e-4208-4aa0-84de-3d42fd8b9907.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f1803bf8-e8e5-4eba-992d-3fd6309073ef.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f1803bf8-e8e5-4eba-992d-3fd6309073ef.tmp
Size 37KB
SHA256 a1ca128438a93a2e6f74bb1cdc04b2947567fc5d1e8e90515833fdfb6952d446
MD5 2d12055e84f19efd2e32a3c9ceeae8c4
SHA1 c4f39c3efaf40e3e0c55c79dfa36b15b33aa77d9
SHA512 4fed36419b58b82e33d43b7e977a501cf7693e86d738bdc23d1ae106bf37c48a7aab4b0ae5f8ed2983265fdf1e3c72bd9a7d0b065ba47d82a21ecba489c7472d
SSDEEP 768:QFIO34wg3Q2IOySB2/9OA9at01j0iq00+IaiMx7lw:tO3Ad5CHq00NaTxZw
TLSH
T16E037B71E8A5DE3BADE3A785B71A73869FE00167C5CD9AC0CAD92D0D00871DE170BC66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3eaad71c-cb29-46df-affa-f00eb72747c5.tmp

Path C:\Users\Admin\AppData\Local\Temp\3eaad71c-cb29-46df-affa-f00eb72747c5.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f04c0bd5-0421-482b-ab97-f06cc7b6d898.tmp

Path C:\Users\Admin\AppData\Local\Temp\f04c0bd5-0421-482b-ab97-f06cc7b6d898.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

zero.txt

Path C:\Users\Admin\Downloads\zero.txt
Size 97KB
SHA256 1120a8195b1b31db766febc0bebe9f500cb97ecb982bfdac33156e6c537064dd
MD5 b772806a86aa4c59cc9a3257ba77cea4
SHA1 d98bded19e706c9a20e6405c8ace1ab3f11c6ae4
SHA512 be93b5fbb16326849d5de7c84f66bec82715288212605862ad71bc0027822b7b803fa6f029abdff408fd6c99c867176b82deccfb5aa1905b5d010f58c8cf6398
SSDEEP 3:n:n
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads