890583091e8669f5ef1ce09a8e97611ebaf4eb55ce2938e449ca5fbf8e430845

Analysis

max time kernel
989s
max time network
1051s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25-04-2024 02:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

RayzToolz.exe
Size

843KB
MD5

2cf3ca9a7e5f493696cd6be71fa23ad4
SHA1

f29e7a1dac76b03bc72d92a19fb25c4530c757e6
SHA256

890583091e8669f5ef1ce09a8e97611ebaf4eb55ce2938e449ca5fbf8e430845
SHA512

415749a0a0c2e3b78f5e81766049e90d33385df1edb80e539f367e3752ea412eacb7f8fff0e25aa598b2c04e914154dd1c5ecfa7e1b9bf66afe06b85cb9eeaa7
SSDEEP

24576:/PS04YNEMuExDiU6E5R9s8xY/2l/dTDIbt+rV:/l4auS+UjfU2TTDIbt+r

Score

7^/10

ransomware

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

RayzToolz.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\International\Geo\Nation	RayzToolz.exe

Executes dropped EXE 1 IoCs

Processes:

AudioDriver.exe

pid process

5084 AudioDriver.exe

Drops desktop.ini file(s) 2 IoCs

Processes:

RayzToolz.exe

description	ioc	process
File created	C:\Windows\assembly\Desktop.ini	RayzToolz.exe
File opened for modification	C:\Windows\assembly\Desktop.ini	RayzToolz.exe

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

Processes:

AudioDriver.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\wallpaper.bmp"	AudioDriver.exe

Drops file in Windows directory 3 IoCs

Processes:

RayzToolz.exe

description	ioc	process
File created	C:\Windows\assembly\Desktop.ini	RayzToolz.exe
File opened for modification	C:\Windows\assembly\Desktop.ini	RayzToolz.exe
File opened for modification	C:\Windows\assembly	RayzToolz.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exemsedge.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Control Panel 3 IoCs

evasion

Processes:

AudioDriver.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\Desktop\WallpaperStyle = "1"	AudioDriver.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\Desktop\TileWallpaper = "1"	AudioDriver.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3808065738-1666277613-1125846146-1000\Control Panel\Desktop\TileWallpaper = "0"	AudioDriver.exe

Modifies registry class 1 IoCs

Processes:

msedge.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3808065738-1666277613-1125846146-1000\{A047C879-7A6F-47AD-9279-C61937457C8D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

AudioDriver.exemsedge.exemsedge.exe

pid	process
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
3260	msedge.exe
3260	msedge.exe
1588	msedge.exe
1588	msedge.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe
5084	AudioDriver.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

Processes:

msedge.exeAudioDriver.exe

pid process

2916 msedge.exe
5084 AudioDriver.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

Processes:

msedge.exe

pid	process
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

AudioDriver.exe

description pid process

Token: SeDebugPrivilege 5084 AudioDriver.exe

description	pid	process
Token: SeDebugPrivilege	5084	AudioDriver.exe

Suspicious use of FindShellTrayWindow 52 IoCs

Processes:

AudioDriver.exemsedge.exemsedge.exe

pid	process
5084	AudioDriver.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe

Suspicious use of SendNotifyMessage 49 IoCs

Processes:

AudioDriver.exemsedge.exemsedge.exe

pid	process
5084	AudioDriver.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
2916	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

RayzToolz.exeAudioDriver.execmd.exemsedge.exe

description	pid	process	target process
PID 3708 wrote to memory of 5084	3708	RayzToolz.exe	AudioDriver.exe
PID 3708 wrote to memory of 5084	3708	RayzToolz.exe	AudioDriver.exe
PID 3708 wrote to memory of 5084	3708	RayzToolz.exe	AudioDriver.exe
PID 5084 wrote to memory of 2296	5084	AudioDriver.exe	cmd.exe
PID 5084 wrote to memory of 2296	5084	AudioDriver.exe	cmd.exe
PID 5084 wrote to memory of 2296	5084	AudioDriver.exe	cmd.exe
PID 2296 wrote to memory of 2276	2296	cmd.exe	msedge.exe
PID 2296 wrote to memory of 2276	2296	cmd.exe	msedge.exe
PID 5084 wrote to memory of 2916	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 2916	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 2920	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 2920	5084	AudioDriver.exe	msedge.exe
PID 2916 wrote to memory of 4796	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4796	2916	msedge.exe	msedge.exe
PID 5084 wrote to memory of 1076	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 1076	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 1496	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 1496	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 752	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 752	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 2804	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 2804	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 4152	5084	AudioDriver.exe	msedge.exe
PID 5084 wrote to memory of 4152	5084	AudioDriver.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe
PID 2916 wrote to memory of 4696	2916	msedge.exe	msedge.exe

C:\Users\Admin\AppData\Local\Temp\RayzToolz.exe
"C:\Users\Admin\AppData\Local\Temp\RayzToolz.exe"
1⤵
- Checks computer location settings
- Drops desktop.ini file(s)
- Drops file in Windows directory
- Suspicious use of WriteProcessMemory
PID:3708

C:\Users\Admin\AppData\Roaming\Microsoft\Speech\AudioDriver.exe
"C:\Users\Admin\AppData\Roaming\Microsoft\Speech\AudioDriver.exe"
2⤵
- Executes dropped EXE
- Sets desktop wallpaper using registry
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5084

C:\Windows\SysWOW64\cmd.exe
"cmd.exe"
3⤵
- Suspicious use of WriteProcessMemory
PID:2296

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
4⤵
PID:2276

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
- Enumerates system info in registry
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.70 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=122.0.2365.52 --initial-client-data=0x2c8,0x2cc,0x2d0,0x2c4,0x2f4,0x7ff830552e98,0x7ff830552ea4,0x7ff830552eb0
4⤵
PID:4796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2252 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:2
4⤵
PID:4696

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=2380 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:3
4⤵
PID:3540

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=2528 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:8
4⤵
PID:452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3376 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3416 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4064 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5060

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4228 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4348 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4964

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4540 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4680 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=4784 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1340

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5316 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5812 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4508

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5812 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=6068 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=6288 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1656

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=6468 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3664

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=6580 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1420

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=6728 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1540

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=6888 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=7052 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=7316 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3780

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=4080 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5200

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=4552 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5416

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=4672 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5440

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=4824 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5488

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=4928 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5628

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=4900 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=4920 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3212

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=3628 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5552

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=4060 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5648

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=9128 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5680

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=9116 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5620

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=9408 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=9412 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=9252 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1500

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=9672 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=9880 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=10020 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5780

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=10152 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=10220 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=10304 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=10520 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=10656 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=10672 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=10908 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=10264 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5852

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=10928 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4164

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=11296 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6020

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=11320 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=11552 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=11596 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=11708 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6024

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=11696 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6036

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=12060 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6076

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=12188 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=12212 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6056

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=12332 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=12444 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=12676 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=12664 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2204

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=12884 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3740

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=13012 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=13232 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3312

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=13116 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=13356 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=13472 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=13592 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=13696 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=13900 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=14128 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=14164 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=14256 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --mojo-platform-channel-handle=14432 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:468

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=14636 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=14776 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4736

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=14792 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --mojo-platform-channel-handle=14932 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --mojo-platform-channel-handle=15172 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --mojo-platform-channel-handle=15336 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4228

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --mojo-platform-channel-handle=15352 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --mojo-platform-channel-handle=15480 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --mojo-platform-channel-handle=15100 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5000

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --mojo-platform-channel-handle=15744 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --mojo-platform-channel-handle=15860 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:736

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --mojo-platform-channel-handle=16044 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1788

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --mojo-platform-channel-handle=16184 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --mojo-platform-channel-handle=16288 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --mojo-platform-channel-handle=16548 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3400

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --mojo-platform-channel-handle=16564 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --mojo-platform-channel-handle=16680 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --mojo-platform-channel-handle=16812 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5308

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --mojo-platform-channel-handle=16952 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1212

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --mojo-platform-channel-handle=17060 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3036

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --mojo-platform-channel-handle=17144 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1940

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --mojo-platform-channel-handle=17148 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --mojo-platform-channel-handle=17384 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2020

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --mojo-platform-channel-handle=17488 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --mojo-platform-channel-handle=17636 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --mojo-platform-channel-handle=17768 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --mojo-platform-channel-handle=17888 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --mojo-platform-channel-handle=17992 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --mojo-platform-channel-handle=18108 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5468

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --mojo-platform-channel-handle=18224 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --mojo-platform-channel-handle=18340 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5560

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --mojo-platform-channel-handle=18492 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=18580 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:8
4⤵
PID:4452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --mojo-platform-channel-handle=14824 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --mojo-platform-channel-handle=12196 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --mojo-platform-channel-handle=8208 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4712

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --mojo-platform-channel-handle=18648 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:2252

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --mojo-platform-channel-handle=5544 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:5008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --mojo-platform-channel-handle=18860 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:3512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --mojo-platform-channel-handle=18976 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:1556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --mojo-platform-channel-handle=16380 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:4792

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --mojo-platform-channel-handle=4252 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6156

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --mojo-platform-channel-handle=8412 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6172

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --mojo-platform-channel-handle=19200 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --mojo-platform-channel-handle=19308 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6212

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --mojo-platform-channel-handle=19424 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --mojo-platform-channel-handle=19512 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6276

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --mojo-platform-channel-handle=19628 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --mojo-platform-channel-handle=19744 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6292

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --mojo-platform-channel-handle=19900 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --mojo-platform-channel-handle=20008 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6308

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --mojo-platform-channel-handle=19860 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --mojo-platform-channel-handle=20208 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6324

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --mojo-platform-channel-handle=20324 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6336

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --mojo-platform-channel-handle=20440 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6344

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --mojo-platform-channel-handle=20560 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --mojo-platform-channel-handle=20680 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --mojo-platform-channel-handle=20796 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6368

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --mojo-platform-channel-handle=20900 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6376

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --mojo-platform-channel-handle=21024 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --mojo-platform-channel-handle=21176 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --mojo-platform-channel-handle=21280 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6400

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --mojo-platform-channel-handle=21132 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6408

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --mojo-platform-channel-handle=21480 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6416

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --mojo-platform-channel-handle=21580 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6424

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --mojo-platform-channel-handle=21680 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --mojo-platform-channel-handle=21796 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6440

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --mojo-platform-channel-handle=21940 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --mojo-platform-channel-handle=22068 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --mojo-platform-channel-handle=22176 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --mojo-platform-channel-handle=22292 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --mojo-platform-channel-handle=22416 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --mojo-platform-channel-handle=22524 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6488

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --mojo-platform-channel-handle=22640 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6496

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --mojo-platform-channel-handle=22728 --field-trial-handle=2256,i,15449139428077818497,2063925145594165915,262144 --variations-seed-version /prefetch:1
4⤵
PID:6504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
4⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.70 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=122.0.2365.52 --initial-client-data=0x23c,0x240,0x244,0x238,0x214,0x7ff830552e98,0x7ff830552ea4,0x7ff830552eb0
5⤵
PID:4380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2220 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:2
5⤵
PID:6336

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=2300 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:3
5⤵
PID:6392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=2540 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:6416

C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.52\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.52\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=4340 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:6820

C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.52\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.52\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=4340 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:6860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=4428 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:2864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --mojo-platform-channel-handle=4568 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=4124 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:5444

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=760 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
- Suspicious behavior: EnumeratesProcesses
PID:1588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4728 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:1
5⤵
PID:2204

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4568 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:1
5⤵
PID:6012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5068 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:3776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --no-appcompat-clear --mojo-platform-channel-handle=5212 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:5072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5628 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:2160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5864 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:2044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5804 --field-trial-handle=2224,i,7414973209992101605,6479919767989135739,262144 --variations-seed-version /prefetch:8
5⤵
PID:3764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:2920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:1076

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:1496

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:2804

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:4152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:1544

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:2240

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:3476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5164

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5240

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5576

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5652

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5804

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5972

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:6028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:6080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:6136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5176

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5092

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5672

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5772

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:6048

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:6108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5312

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5400

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5700

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5744

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5232

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:6084

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:2836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5292

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5208

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5484

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5760

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5820

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5936

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:6032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:6052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5372

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5512

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5656

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.niggafart.com/
3⤵
PID:5704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4136 --field-trial-handle=2744,i,16362475727591565961,3676688664819797550,262144 --variations-seed-version /prefetch:8
1⤵
PID:3444

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=3660 --field-trial-handle=2744,i,16362475727591565961,3676688664819797550,262144 --variations-seed-version /prefetch:1
1⤵
PID:1744

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --mojo-platform-channel-handle=3976 --field-trial-handle=2744,i,16362475727591565961,3676688664819797550,262144 --variations-seed-version /prefetch:1
1⤵
PID:2224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1392 --field-trial-handle=2744,i,16362475727591565961,3676688664819797550,262144 --variations-seed-version /prefetch:8
1⤵
PID:4372

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --mojo-platform-channel-handle=5220 --field-trial-handle=2744,i,16362475727591565961,3676688664819797550,262144 --variations-seed-version /prefetch:1
1⤵
PID:2888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5584 --field-trial-handle=2744,i,16362475727591565961,3676688664819797550,262144 --variations-seed-version /prefetch:8
1⤵
PID:868

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=23 --mojo-platform-channel-handle=5656 --field-trial-handle=2744,i,16362475727591565961,3676688664819797550,262144 --variations-seed-version /prefetch:1
1⤵
PID:3424

C:\Windows\system32\werfault.exe
werfault.exe /h /shared Global\4697c5afc4b34278a3efdc81d713b966 /t 4048 /p 3848
1⤵
PID:776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\SearchConvertFrom.html
1⤵
PID:5792

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Defacement

T1491

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
280B

MD5
45a1976160d9a7faeca2498545826143

SHA1
5cc58967734a579aaf1c3565acadb935fe9a4402

SHA256
3fd1e9d5e092748bc5498b146de8bf74d1592f9c959ffb349676641b42684023

SHA512
f7f06e444144dad5dcd95153fd82afc1068186cff11c2c12304b3d74c654321cec48a1aa73846342bee047432f82884a5d140e36cf63073698593b1da680cf5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
280B

MD5
619a64a95711994a32c9ed54f2241c10

SHA1
e059a790cbeb7da9fd4bbb557675254b83f8acae

SHA256
b80489100362226691ff7a693a984b3d58fd0490e27076284de6fda6a151ce8e

SHA512
083927e1f39439ea8925feee0b0bf61d0dd51e723a6857d9f7dba87d9208ae74983901730b3d8eb7901fdb783e6dc705da490a9c738a25240cfa907618b223d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
280B

MD5
831e368605e9514c193548f08bc4a57e

SHA1
232cde90cd41fa22836f973afeb800da20f3ad67

SHA256
40f5c44d0fe6e365a6ee0b6a9bb3acc9d6acb21d3b36d75020c946dcd52cb854

SHA512
6270ec27c3e7d5a2a5f072d8b4f73963533e09677a93dc43ea8c012626e967c77fa706d586de99f88d1c35c57575e5ea2d05f29a82b45410739523a6175f6b14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f756322-4ceb-4afe-8649-3401cb0130d4.tmp
Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Filesize
44KB

MD5
850e9b8630fbcfc59f15131788f3d140

SHA1
099e20d21675b2378dd9c43d41d85d9c638ddd3c

SHA256
a87d20239ee289afcf52fcdb7b78a3012b97c7ea2609c7d8d9baf6b140119217

SHA512
4de04ad4154d634510066df50ba615b3b8946d0f7d38ae8abbb3a77157adec48e21346223bb97d1cd9be9b603520236fc4863824af82ee493c8e6e89ecc814a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Filesize
264KB

MD5
5c9e4728c019290ebf626efeb379c5d8

SHA1
18c02141281152a1b1e7878b5d398ebdceb33292

SHA256
57a360aa301436b0d46272424cdaf7f0f43cb9e65bf1296f2747395dc5811496

SHA512
66b5b55e610275a703d71a8e24e8382d174f8b0437a5dd2be5e5f90a16aaf8f08bedc25a3174185bc66eeca2166029cf99848492b3559070656d847fca3e7322

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Filesize
1.0MB

MD5
24782e4abb4558821fddc5dae5661cbd

SHA1
9e25349841071d2befeeaafc426c8e07af2fd258

SHA256
da168ae986b96a0f17b7d412024619a1562067c5df910833b577c5da67bab46e

SHA512
ea869770d85bdf5ec1d47a4655f7523eb41c81ce4de8ff8ddf2c0fd68fedc6e2795135b30c7cc96dd25a94ddb4fc80d9fa0a4735790f632c657f61ffaf0890a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Filesize
4.0MB

MD5
332fdf0333e7fb35a94840766755a63b

SHA1
3670db0bd0b0d66f20f70fbf222a7ddedfb7b459

SHA256
7ff759fd43b28a435187ed1636774dd4019c5a00d3ddbce63d487c73d8a5e650

SHA512
bcf571b821d6878cd30a3809445978b29a030d66141465487cd75b0ffe4def6089b9ca24a7dd9c28cfa02c70164332626288d0b29642a8e7f592536f4ceb63e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
72B

MD5
af19dc9d2c109f4baac315ec9aa178a9

SHA1
9b7c0058463278f3c9abb0b619f5bd820d3296ef

SHA256
eb389a57cbdaffff9a7de7faeaad783e27409b0e0d7e51844b33561805b0f666

SHA512
551c455fcc5912f5d760898ebb43b3a00dfafe2996ec695b35d239fd151a9a04f3a87018fefaa383fcac3744d4716e457b281e029e21290d04bc47a5ab4ce030

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db
Filesize
32KB

MD5
4bb9ac6e72faeca724642933fee1879b

SHA1
6a1e7ced5e5c772e883c85230369df56f654ded9

SHA256
71f98af6eae3264b10e021f43416330636f550efa645a6a833d1b234d40427fd

SHA512
bf9ec85288225c06e4898c066e0fc5629443b33d8d0807883685f201055c56906346f40b376e21b6a18b0e9f685ca2ca77807cf4b4d5eaf11e6fea01864a47bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Filesize
319B

MD5
aa893618b662a1362ec55a14c826d865

SHA1
b243de068e625a184f5fed36c69ea18d1e94a75d

SHA256
b6235d54c7ad3cf6fe7f17695ed7c0755c977a442f0e350952b412ed8532d883

SHA512
f9e15e903afd8281db274f355afc8f80e0da7b2444dbff8f59f6e1ab3a877f580ba975c39c3b10daf168b497b440a02ec97caef32ee3b4fe2be41a2d0e8953ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Filesize
192KB

MD5
afbce175bbea1ebc22b61991db70f3ac

SHA1
8e05b6192d691b7380ed6e377aea66a5d8a428da

SHA256
b78b9cac34048cce9c091194443be8187e4e811d1b199924930d904063f0ec26

SHA512
f81db53949c371441c038061c0b12eb504efa96294e589b39b4b870f6905f7811e0e3ecea9c6c28b2074d9054d88c85c2429fcaec1a8e37a68b85fad5f0636b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4f3456fb-f8d5-41c8-8b9b-94d9d2577ee9.tmp
Filesize
1KB

MD5
65a5fac6e29e16033ccb0c044da9a045

SHA1
78ba3ab3fd0f2e6f2044821f0a83f9b7c1383a26

SHA256
ba22251b637d4581149b0aa15a69e31b0b7044d4a8d20283942f432c87c94b67

SHA512
835ac622a402b0b73375f3426596329111298478cdc9153a5afe2f09b74140d804adec236ef6b8a281ffead969fb60c7a6fbed7a12a8d1d72206fddcdaaaf256

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Filesize
1KB

MD5
96aaa10db2dd34936a92c61dbbbbf31e

SHA1
bad5b3bd9f7564cf4ab86b67d35235c55204a683

SHA256
d56aa53ca6f0054b1073150029a7ef0b47af1cee1358bb01ac0c8d3a046ec537

SHA512
11b85fbdca8a856636ef630af0271a242efe2061ab42cd96dbf75f346ae864719a53364232c78b9cfcca0528eaac589e09794f9d1513cbd6b7dbebd68fce383e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Filesize
1KB

MD5
c23dfad63da26c6115b59caa2ba58cbd

SHA1
823ada273f722761fcb6927dbdd70885b732e77c

SHA256
a855452a091403d6335232a2c29dd40a97e74e7948ad4d9dc2275a3b65042671

SHA512
e74af5d34603ab780fec3b60a4639e5d629be81dc96e4e73eb924c888aab4ab59278a579bcf51a72e60b2d7bb1a7aa51202a5cbb4316307cfdf7a72142fa904b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Filesize
1KB

MD5
dc75b6cd68f07445de77a5263762e770

SHA1
6aeee6b87bbb5dd33bb9be78b12d1ba6f68af3cf

SHA256
f39e18645c2faeebf9a78dc8c7a281e7862efc3113d855ead2e09b3aa31fe46c

SHA512
610c2414072f6ba7bb82361bb852b6813d6eebdedd0995a5129036ec0777fbd420e22d5726aa8a65be098c9191494513e27b1b3741866a8aec1f5daeb60f6bfa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Filesize
1KB

MD5
b7e7ae071bfc04cf2054a3d4963c7328

SHA1
b8e4ca4e4d794e9367fcb783f3fe1ff2f928f63b

SHA256
f882f0268925fa9cab8f14831683206d84696cdd0a218f952d75771e2323ce62

SHA512
8291f799c80cf451dfeca643c4dee8891c3fa0ab008bfdba5b7f2363d03bcd9a5aaf57718dc890d0b8ffad9f7ef14b8df6ddbe92231310962d969eda6450bd4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Filesize
36KB

MD5
2b7c2852d698fda748523e3c0e85030f

SHA1
d37b8eca305fd82aa8e4d4e89d1b2f2d76daea7e

SHA256
6235a8b92b24dbfbcd6835a7e7e3aebcf9187905e8d26f37f6c21758c2243f3e

SHA512
e921e1b1f679898b35e75f3a5a6fbfcbb474e734bd2b520d1093e9fa9d2331ae05f71eefadc38b37187f1c83c94cbefa68643cdac4b0378ad1b47faad03a428a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Filesize
690B

MD5
16df05169ad112af7d63c3def6f69260

SHA1
e2976d538d8bc0db5370a83fd3e30fdf9b7083da

SHA256
106bc4e5d29b70a7cff5e6441864e44174c98f2c0e1d6e22d47be8ba2ee07175

SHA512
9b4b0a6dd83295c3b8bdc95da81d4730fafcc18c72471e5e1a4f49ff117ba435cd84c550fa84aeffea98105f4866bf578b3a5d2338dc394d05a9336a994cae96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Filesize
688B

MD5
f0e58bbba8f3ab614759b4851167f45a

SHA1
7fe2836da19266c877fc5516284dcaef97aeeef5

SHA256
72acd7ff2a46de334db8a3021c579cd883e5bbdc29980b889c78c33e09f2f1c8

SHA512
d947ba58e12280413d18a002f8c2be8746ce91b374a1314e5759f381a2423a2a2d25a8da8a28132ae79db938f5dcf413f402e9229b1ff58d07caf38ce827e813

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
10KB

MD5
a41b96d1415354fc8fa15b2e313b4f69

SHA1
380afc3feb5e385a4a4a9d161812ede4538c2881

SHA256
283c535f6050848318a8cfe02379dd55f0cd1ef49bfe133935c19338c0ab6a4a

SHA512
3d4cce2a263cbb6ca8e3e58bdfc44bd877f552fd90f460c63ef0bc516ecf329252a54a9cac6bf7309a7b7d2df2201031ec8f51af8c53008bac7e306f19688cd8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
11KB

MD5
6d3128cb2731417fd1178ddfb75a0630

SHA1
30b44da4fcc8cd8c95bcd650ce70223e6031a566

SHA256
351ae2dd34be4472730d46863bc14a5e3cdaddd1dc0a9819f116a417d7acb258

SHA512
899d0e8bc50efa503c9b299f386a4dcf28840162a6f52f7085f1fe2367842a5786102bf3845dadaade645f466ba9465135326e3f4658104abfac8112034a2d8f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
10KB

MD5
9f970fce3e863b40f4895d4d95bae1b8

SHA1
715108e3c99ecc531e17838a244db6fa6b06b77d

SHA256
c335083ded19dca900c9fc6ed02abc319ae8d6da09f44eef11eeedb613d39b2f

SHA512
816389d2dba646c07574518c1df631e1fc441bc3a0c6f0bf24a6ce5097ab5ff5772353caedd825e83c57c19dc45b3d42cb0d65423a6d995fa10bd3de0a3a590d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
11KB

MD5
38989978995ee5224eb47fbe0cba93c3

SHA1
623d089a863abdc83a0d05db47e12668a72ba75e

SHA256
c11590161c7db6ac4c1ebe22eff868db778f95d761847f9b9d518316cf6839bd

SHA512
8bb40e623c83654b6eb6ca815ce6d2379b42f36ab259adb9692e5964c5dccc887e14dc3b989a98d8e8aadd0f666a04dfc9713de05da5563c7967714fd161a199

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
11KB

MD5
0cb0515c913a8822ea15fdeff06cee34

SHA1
4a83b1bc2351c76e49f5e4d9282305b9adfd1ce6

SHA256
1f73f8172957aa187d3b3653e80e6e4eaa063ca13adc57c6a7ed185eec70eecc

SHA512
1bca4c0808dfd0453d830c5abecbbeb4c9be06c25b46682aa047eb8b2dfdf69aef014d303a50392e6b82ad002d4a7d82dc3caab73f97c0afe246e53c39bc294d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
10KB

MD5
c7ebeb61e589b91a23ce180a81071bec

SHA1
abbcc613edeb0c896bb9cc61a04c76ece062a5e0

SHA256
5cc96fb7f2d80867daecda58c47be3bc914c66d919557989a6ce384ee7fc3bbc

SHA512
92ec032322337c967e518fe6f5a9f959c4df46f5b07e2ee87418b079e534d6fcfdd21df9c50e8400e6194390d5df363747c1feb5094341a0d2bcdb6175bf1df5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Filesize
30KB

MD5
18146a0de1e33bb4ea8f846489fbe711

SHA1
adf8204278484391d231f12d8dead4c5e94efd48

SHA256
09367cce8e5b463524a0864f4a1518afbbf97b44dee85371024bece4d8c060da

SHA512
e7b76a40942126c957a8d761d60db472aaa82a865db16d0cec0472e777951f00021f6f3b6490711f592605baca493be164cf20e7ba8c352e965819d293d58e2c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Filesize
112B

MD5
09d569cc856b0b7463b2888209d99af2

SHA1
31994d487a691ca553a0ea236971b636713d7610

SHA256
271f87a2b9cb8a244e0a889a3869489847f8b3f5a84715ea6424ce9af2b6de1e

SHA512
5c572fc0f3f4ba13f9cf8ea20515bd8e4e8aeb64de0712ce687b916e56e345906a53eec6ea0bca376ee580cbe786472fee6fcc4997bb1c9cc423e8d392de9dfb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Filesize
347B

MD5
cd7458d12d73d7e4c0ab5c470651a867

SHA1
1970946a0e5a3ef37806358e7162be0a178ef318

SHA256
a87132ae92fee772ca86a8b2f72861d81417ecdb744711aff5bf8caf24557c29

SHA512
564fe2aea0ca60b0c1dae171b438e0bf321543db5867300b947aed0dd846b5ddd6bf2b6ad08567210394bc5d9442e8792931125d9fb1093558479539a4ca0774

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Filesize
323B

MD5
99b7df4bed625ecdd81cba9f98090d71

SHA1
6c5fc78d760f73d5a9cc8b614d8d76f369ddc60d

SHA256
d813ccffd59fc96edd6933734419a2da6fdb14beef9367ca6f18e73f559d562a

SHA512
26733f83f9b0246d38e4a127b1c8843bf457881ad6bd2ec949a6ae10e97ff247435a68f8459e9a26a4842ef5353cf2594efb1e2bacc98f4910186db6411fc989

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Vpn Tokens
Filesize
28KB

MD5
599549ca7050fda41d48cd1d92212e59

SHA1
9e44dec26d7dbced9ca1214da493f613f9cb0150

SHA256
8eb4364904924eac8f323797cec4569b52c109a32d2d848af8fe3e4fd87eacba

SHA512
bd0da72d7582c887cd2e451841d8dcedf84b7d631220f696ad1b73611e88c77a6a974781b288a422c28cdf91fa74a2d5ca779403282f717a4a59de31b352e933

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Filesize
220KB

MD5
c16b476f2fc62422b9d08fb8d90eb2c1

SHA1
045efefbb03da7129386b597b8b1d809e0129f32

SHA256
1d121e8a1d66b887183be09381fbcc4516c58e39f8a232a3d948d2cce1716779

SHA512
ff500e60e3a7dc5eca8b930a6b947c4c8b83435b49c54d437eae7340cb7dbcfefb7b4c058fbd65f78c2c7cd8a48a33d465b20d8c82757c899aee4ea8035bdfcf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Filesize
10KB

MD5
57568101acebec0d0b6da71cae750ffe

SHA1
fef13f40e93641a18401b572d2004a0d88c4cabf

SHA256
ed8dd56e4b9f5b0a5cd21bce41b3dc5a863e7960e0880dc454124ad84bdf5660

SHA512
9a3422a013c8941d7c14ba079e7c871ed23884cefe9d5ccb498acc2503c4745c5cc8ed6588fdc3d51260f7c3bc14f1d47b9747e27def3d40b842f41b2436c796

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Filesize
322B

MD5
373ef147ae010b6ab134183772cd14ca

SHA1
150888afd617a3da4fbc55a0fd518841552cb5d7

SHA256
d1b7d01310c7595d1338edb06fcc0ac55dd06fe6cb0c6f425e665db146fb0b95

SHA512
49ec7e9ccff9fa19c9bce3c79c9f7fc5235ce1c61c5aed9d1966ad4e6643d17c0f6860f45d47aab21e0578ab8da620176c552290a5a2f2bd33a890872beb4b45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Filesize
922B

MD5
ce6cc1de78cbda9a4284d501659686a9

SHA1
dab820c392944504d015ac462ac441cac6e07e36

SHA256
2aee52388f2c87feeea2b23c0130610c0e3cbb972f488a692bd6075e9cd50286

SHA512
c5a808e05226daebb537e1cdb6392e53d79d2b4bc84c7e763495cae9f81b1dbcfab305b9653352a1da298c8099142c7303a4d63943e0f4c91d654155e4196da9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Filesize
337B

MD5
aab5badb41298f8c624fc9e5356edad5

SHA1
7ab0a4d3d9c8b9c80388994925631d060247776c

SHA256
831f0e2c52e67a858ad5f3b4373d58ec1c32163b6257ec1f70cb92ff736d72fd

SHA512
188a262fc15b7198f712186a252b38fed56e2614e129cb2823c2c63705d9abca4e555939da3708b6b806cd9771ed61b6a4baa75fcdca0799ed2d77f17845ade8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Filesize
13B

MD5
9f0786e66f4c80870bd874b7aba0a394

SHA1
74d461c9049086ea0301b956203e7cb59438160d

SHA256
da3e73d31020d249d320f01fc40220043e34ebc99fccaec56c5a97f671a8f227

SHA512
f766b4ee7c28886c1901cf76c1c917e296ddfd3cf843f4f27d7a73db37247ae0dfb8c3f343c4ba124d20f4475e0fb4cf60860215480341715bb907d73630cc6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
36KB

MD5
7d99f3f93dbd904bff70d533a9b55417

SHA1
5debf4c0ab49d761758819151409a158259eaefc

SHA256
9e5cd490aa9d8bfbb53fbba784baa00b379b4c23ee830cb3f935511b1cf2e95b

SHA512
6d0d3d76d8a6d8a909d1f82487985d84eae24350c283e6859118d7e0b9bd9f05daa04c4117304b740155b45e23a302dd8e85e5669582d887bae774ee97b45b04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
36KB

MD5
c97ca5ba5a2b8804972ad266676cf154

SHA1
5b9c16aa3ba92e016a05d8a7921a423dc3e44b26

SHA256
bbb5af0bb1ff7ab3f44f7d54c0a647ab2ae67ccab1845a1f5b25f8390ef891d8

SHA512
f7bbbefb97876919bcce12873101994a40e96b0b4978323580e7efb2fc710db1badfd0a04d4f028ec51070b57730401cb76e55500478ac3211a116ecfdea5cd5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
36KB

MD5
640df0d00bd1c40980af749bf0d5921f

SHA1
93940861f3d68d6939ab49f6a45748470d512a45

SHA256
7d8a904fa95e7588e8971934ee93daa00293464bb3877e34ad685b041b989fe2

SHA512
860516f59cc53f51963a3f317fbe8b024f0cf43c7133841a171af3a43239079539ec63d42fbc131a3b501b356c2a2f8bf7fe2ca12e0ea3386fa5b4c5ca9fa8c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
51KB

MD5
25d52ded11cda60badc9511656070f8d

SHA1
3dfb2c7a34a5575e66a0b5fd979ed2169450db12

SHA256
453de3d856ddb646ac6e423001a8bdea0bf5d043fed84e4bdedee6c08bfc1d65

SHA512
0c0e808af0bf1afbb3ad3bd321b805b007c88890adbc07b27ef923d1f765c70b39b30a98367605c2bcca6e8c47cb9d054029f296b6b9734f8c069a415f412267

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
46KB

MD5
848a6a95317cbff9152c676e002ef701

SHA1
aeded280d8199df22157a3b24bfe221980f6413a

SHA256
366a26d37d8cdf08657d4a1250ac6da4bf7975442c63bcf9efb47f1decf90427

SHA512
4daeb13f9fca4b3b579a8d6287db302e9437666a51c4ccc264e8bc72b16d620794d9d565262a4c5cc1479c4c3b1b84c8444856aaa6359900d96576d71cad9fe8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
36KB

MD5
918859bd09b02fe56bbe36a816da8170

SHA1
cc16796ab5eb5fe99dee74e3b0232bbea5c08480

SHA256
3f55e0967a695401e76e602815b3bb66cfc64fc1087f489f9cc479e970274299

SHA512
336a8abaac21dc35f7aab21e83a5c9e0b3b9a7b4eb787f0a3b54f520e454d0a8582d619e9adf4d8db2c44c7e265c49fcfe3bcbb126e56cf521bbdb408ad20e01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
39KB

MD5
1ad583f63c9aedcb0e38663074a98f4c

SHA1
8081cbb5833fff110f23f0f3e09d205de6581ddc

SHA256
2e6e7c80ae3571c899b1fd614ca64d65a164d9a3ac463177abd54223df51e59e

SHA512
9025a8329ecbefb35a6fda0847ace8a74247b499c245e106a3797cf96b92ca06e424b882c740bed0edba4c11bfbb702bd24f0db4b19a22126fb11fdba8e41dc9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Filesize
86B

MD5
f732dbed9289177d15e236d0f8f2ddd3

SHA1
53f822af51b014bc3d4b575865d9c3ef0e4debde

SHA256
2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93

SHA512
b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Speech\AudioDriver.exe
Filesize
843KB

MD5
2cf3ca9a7e5f493696cd6be71fa23ad4

SHA1
f29e7a1dac76b03bc72d92a19fb25c4530c757e6

SHA256
890583091e8669f5ef1ce09a8e97611ebaf4eb55ce2938e449ca5fbf8e430845

SHA512
415749a0a0c2e3b78f5e81766049e90d33385df1edb80e539f367e3752ea412eacb7f8fff0e25aa598b2c04e914154dd1c5ecfa7e1b9bf66afe06b85cb9eeaa7

Download Submit
\??\pipe\crashpad_2916_OZHDMRCNVLZUNNJH
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/3708-1-0x00000000749C0000-0x0000000074F71000-memory.dmp

Filesize
5.7MB

Download
memory/3708-2-0x0000000001480000-0x0000000001490000-memory.dmp

Filesize
64KB

Download
memory/3708-0-0x00000000749C0000-0x0000000074F71000-memory.dmp

Filesize
5.7MB

Download
memory/3708-19-0x00000000749C0000-0x0000000074F71000-memory.dmp

Filesize
5.7MB

Download
memory/5084-25-0x0000000001830000-0x0000000001840000-memory.dmp

Filesize
64KB

Download
memory/5084-20-0x00000000749C0000-0x0000000074F71000-memory.dmp

Filesize
5.7MB

Download
memory/5084-18-0x00000000749C0000-0x0000000074F71000-memory.dmp

Filesize
5.7MB

Download
memory/5084-21-0x0000000001830000-0x0000000001840000-memory.dmp

Filesize
64KB

Download
memory/5084-24-0x00000000749C0000-0x0000000074F71000-memory.dmp

Filesize
5.7MB

Download
memory/5084-26-0x0000000001830000-0x0000000001840000-memory.dmp

Filesize
64KB

Download