Analysis

  • user interaction
    yes
  • max time kernel
    562s
  • max time network
    559s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    30/04/2026, 15:21

General

  • Target
    https://www.crazyforcrust.com/easy-fruit-tart-recipe-no-bake/
  • Sample260430-src2lsa16r

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Loads dropped DLL 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory 3 IoCs
  • Drops file in Windows directory 42 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 58 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 50 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.crazyforcrust.com/easy-fruit-tart-recipe-no-bake/
    1⤵
    • Loads dropped DLL
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:4396
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2c4,0x7ffb8b04c188,0x7ffb8b04c194,0x7ffb8b04c1a0
      2⤵
        PID:4564
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,17054040156696875774,16286888051067780964,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:11
        2⤵
        • System Time Discovery
        PID:2284
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,15043530245175711917,14956719464718933491,262144 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
        2⤵
          PID:2208
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2520,i,6803157913826368149,6403990801660436259,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=2584 /prefetch:13
          2⤵
            PID:2408
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,8423093178985204435,1089902021970026450,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
            2⤵
              PID:4544
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3512,i,15971145648619453549,2293963764732497709,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
              2⤵
                PID:2160
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,18025992836480346562,14575466004069431099,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
                2⤵
                  PID:3076
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,15595729354657522111,1307731756493464163,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:9
                  2⤵
                    PID:404
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4224,i,7716647410631570628,16560882154243090637,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
                    2⤵
                      PID:4784
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4236,i,15877681057326681160,12936554121308857343,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:9
                      2⤵
                        PID:4164
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,4173021163440463670,9166486339830048389,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:14
                        2⤵
                          PID:2340
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,10897123643715066008,10834287764731795459,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:14
                          2⤵
                            PID:4520
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,11319470189583516622,96250323477566529,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:14
                            2⤵
                              PID:1800
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3728,i,11016688623305788107,16709196542356005538,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:14
                              2⤵
                                PID:1772
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,3329890924877683769,16197290188317519918,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:14
                                2⤵
                                  PID:3196
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,3329890924877683769,16197290188317519918,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:14
                                  2⤵
                                    PID:5112
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,348607378460301852,17325944750718565827,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
                                    2⤵
                                    • Suspicious use of WriteProcessMemory
                                    PID:400
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                      cookie_exporter.exe --cookie-json=1128
                                      3⤵
                                        PID:1504
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,6825613672170489834,6331736867225954491,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:14
                                      2⤵
                                        PID:760
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,5957485697462631521,16268267672942876294,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:14
                                        2⤵
                                          PID:1360
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,12436379491315741270,17194858023820264760,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:14
                                          2⤵
                                            PID:4436
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,6054565580902183226,3282764539215851245,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
                                            2⤵
                                              PID:4644
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,3459870025901722506,16730590245326707001,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:14
                                              2⤵
                                                PID:1144
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6868,i,12462756594697120974,931816974021212519,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6908 /prefetch:1
                                                2⤵
                                                  PID:4704
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=4324,i,16985757762253501034,699307350764395900,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
                                                  2⤵
                                                    PID:1216
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=4216,i,363860181499204808,3358525763526023716,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:1
                                                    2⤵
                                                      PID:4296
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4600,i,11870428762902845757,274305145845164490,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:1
                                                      2⤵
                                                        PID:4600
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7096,i,11568382494201764243,1221895920849098453,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:1
                                                        2⤵
                                                          PID:2244
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7052,i,15476093311493588808,10196182692620085841,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:1
                                                          2⤵
                                                            PID:3536
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7008,i,12245193362704662478,9180728704617513983,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6984 /prefetch:1
                                                            2⤵
                                                              PID:3112
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=6996,i,10099968837521668908,5965282346588841865,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:1
                                                              2⤵
                                                                PID:2340
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7040,i,14198013976999538432,4444976018245325938,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:1
                                                                2⤵
                                                                  PID:4020
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7016,i,12447218868839552416,11487488644064412877,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:1
                                                                  2⤵
                                                                    PID:960
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7044,i,3864014868499505200,17389846327199479127,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6964 /prefetch:1
                                                                    2⤵
                                                                      PID:1984
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8112,i,12869009443483456264,13857730034138924288,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=7900 /prefetch:1
                                                                      2⤵
                                                                        PID:3168
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8276,i,15133569448785272026,1619787270715405161,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=8288 /prefetch:1
                                                                        2⤵
                                                                          PID:1124
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8292,i,3824435134407125828,12823390014556182024,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=8460 /prefetch:1
                                                                          2⤵
                                                                            PID:3804
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8320,i,16854315011481593012,16158083255197567631,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=8324 /prefetch:1
                                                                            2⤵
                                                                              PID:3064
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8796,i,11424322248443473559,5522440825271646674,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=8752 /prefetch:1
                                                                              2⤵
                                                                                PID:3928
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8768,i,17342584689689762249,13858153999115301734,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=8924 /prefetch:1
                                                                                2⤵
                                                                                  PID:4348
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8756,i,10467031137437552836,14955495058166016471,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=8996 /prefetch:1
                                                                                  2⤵
                                                                                    PID:952
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=8732,i,4172630234845024458,10049557881655012297,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=8944 /prefetch:1
                                                                                    2⤵
                                                                                      PID:540
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8836,i,3073252533024259572,17311516794706614400,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9092 /prefetch:1
                                                                                      2⤵
                                                                                        PID:1784
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8760,i,13553540354291068961,13123264647252768910,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9132 /prefetch:1
                                                                                        2⤵
                                                                                          PID:916
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8856,i,9421321678085015957,17830984414747372447,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9184 /prefetch:1
                                                                                          2⤵
                                                                                            PID:3392
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8864,i,11814810368642813108,16918911123585313753,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9200 /prefetch:1
                                                                                            2⤵
                                                                                              PID:4716
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8896,i,1862743283969476377,7953304051284466068,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9244 /prefetch:1
                                                                                              2⤵
                                                                                                PID:2676
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8912,i,5680515511537993254,10281926828042212202,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9372 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:2640
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8920,i,13588197494058249262,8541141621271209709,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9384 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:3456
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=9012,i,10887007377055527676,8114583770595533681,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9396 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:1408
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9032,i,14054271667615198567,15258780066444917620,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9496 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:5128
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8952,i,5027597045031075245,8164189714606641232,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9452 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:5136
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8976,i,1178572917302328500,1763121875981619959,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9144 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:5144
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9104,i,17120189961261598604,4223144291122446122,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9904 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:5152
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=9088,i,8303987397967101185,7722955971015717296,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9844 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:5160
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=9116,i,4655734213482884762,7345375368761246170,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9864 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:5168
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=11424,i,9136788460291441052,14546152566130881882,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=11504 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:5688
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=9068,i,16612698017535110213,12646940152628405811,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=11660 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:5756
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=11068,i,4340478677743696801,15101419250980385192,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=11808 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:5780
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=11956,i,3239941359699372852,370291462864512692,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=11836 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:5800
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=12084,i,5678782553004058289,16940399142664567815,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=12048 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:5808
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=12324,i,10160405319165449441,10930416270576282669,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=12320 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:6064
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10244,i,8447134534490717193,6679750442835913660,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=12312 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:6072
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=12392,i,3022634900521399138,10508881050909502244,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=12496 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:6080
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=12384,i,1986857137620207351,8939471293575521669,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=12632 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:6088
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=13000,i,13334730371371971994,8134752702693329165,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13052 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:6152
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=13168,i,14482827294985310853,10170299881964153276,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13012 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:6196
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=13324,i,3443952006002265649,9050742144786744617,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=12884 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:6208
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=11068,i,10146888386085442841,4288034914962059734,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13448 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:6216
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=13568,i,1798987300103382447,3281758616593252673,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13580 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:6224
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=13716,i,7833108614183793451,8911923383032155013,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13728 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:6240
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=13876,i,12235050529029181576,13385572962344455670,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13464 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:6672
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=11444,i,4533202379549827042,6361204479703173851,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:6740
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=13152,i,7723969988864098089,10234412330086038639,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13148 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:6748
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=4532,i,9522132259211675685,3404286305221473667,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13004 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:6760
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=12788,i,10686711359300841390,9142689648483297615,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=12864 /prefetch:1
                                                                                                                                                        2⤵
                                                                                                                                                          PID:6768
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=3496,i,8956716675637110355,16532454423516955586,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=12816 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:6776
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=4288,i,11913291151507127850,17056433815759802473,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:6784
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=4604,i,12931811069286660223,16163959476028535898,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13392 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:6956
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=13368,i,2138806006555915558,1444284232205517113,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13424 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:7028
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=10232,i,8634056874760309395,9387605270078841758,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=10140 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:7044
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=4288,i,967160841444555589,9868602917225364392,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13296 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:7148
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=10136,i,17700677399943753739,15704272295495082201,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=7308 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:6156
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=7376,i,3882662691175411031,14611153910029166744,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=11112 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:6276
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=9568,i,8881266854020014553,13653829829576808735,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=10152 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:1720
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=7504,i,9823676374601396163,11431840775665470357,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=7516 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:2580
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=12716,i,17378334411242714183,11321228460544739487,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9852 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:3920
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=12720,i,8269364452189325899,3240013359794871092,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=12560 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:6200
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=11192,i,11893147910196779746,2558557063572117959,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9856 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:6424
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=6240,i,10464568026545408320,2743847406170677756,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:6420
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=10940,i,9981656119131493710,9205628635619907145,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=7424 /prefetch:1
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:5140
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=11140,i,5656921891281760665,11934776121761025403,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=7332 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:6316
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=14036,i,13483543219797303538,15554979105506665148,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=10976 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:5872
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=14188,i,1681611540052837245,16076787840277591092,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14164 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:5924
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=14316,i,2246332207063587840,12853889843724570502,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:6264
                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=14460,i,12363203165884521883,2550060359275177638,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14472 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:6284
                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=14648,i,16558863430636789270,16906474649170162010,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14444 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:4264
                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=14744,i,11472714072487255157,17803953552653615544,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14752 /prefetch:1
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:404
                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=10908,i,3144627806032035662,15786613669278263543,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=12720 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:7344
                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=14796,i,12274071974000259797,2971514467486649198,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15004 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:7360
                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=14936,i,8823155283942436658,6303609216785714432,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15164 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:7380
                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=15028,i,2032572864415849065,16423550832168700884,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15144 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:7388
                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=15428,i,5481965675274281911,9515896268345788109,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15432 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:7396
                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8400,i,654844133312801245,17298097021425010196,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=11220 /prefetch:12
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:7748
                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=12264,i,4072082005757381307,15373364402120119597,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9424 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:7972
                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=11180,i,6219779154283088162,3180022254095056668,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14652 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:7436
                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=564,i,548484100591462755,8064216073147073430,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=10864 /prefetch:14
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:7344
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8348,i,1084823823068511824,12709348867575173810,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9412 /prefetch:14
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:7380
                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=14684,i,1608377826226238050,18165089279201222754,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:14
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:7388
                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=5500,i,10314816810225882037,4614027126318761975,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:7268
                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=5184,i,5780003635849221955,5190240521165446747,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:1
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:7632
                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=5588,i,15041347917202792680,6198261379920058832,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:1
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:7712
                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=15144,i,10522860249975130126,8788737302117977558,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15140 /prefetch:14
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                                                                  PID:8048
                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12752,i,13528110138280482921,15106062924110827162,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=10628 /prefetch:14
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:1124
                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,5946673668447081526,7903350733496713040,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13444 /prefetch:14
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:7024
                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,5626365275084553321,16887031469051672614,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9608 /prefetch:14
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:4016
                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=14908,i,10348476569780106908,5888442866161684838,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:1
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:6788
                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=15084,i,13902732718154707745,2675723920879820384,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15060 /prefetch:1
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:6660
                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=14564,i,2531173545089762885,3683272064332160835,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14480 /prefetch:1
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                              PID:4752
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=15012,i,13932300137217682840,3376043816876010344,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14992 /prefetch:1
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:7336
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=14088,i,4123711387293374338,10774273525203148959,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14576 /prefetch:1
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:4052
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=14764,i,17998437824597474354,7719342940683701588,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14496 /prefetch:1
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:5520
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintCompositor --lang=en-US --service-sandbox-type=print_compositor --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9468,i,12983994376078674087,15492783848048839212,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9844 /prefetch:14
                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                      PID:2044
                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10632,i,1939527997769907322,685414774163678150,65536 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:3
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:6884
                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9112,i,10160041130471345772,15348526007350112035,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13268 /prefetch:14
                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                          PID:4852
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11116,i,15692023719827881539,1331544383998174406,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13376 /prefetch:14
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                            PID:4468
                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=printing.mojom.PrintingService --lang=en-US --service-sandbox-type=pdf_conversion --disable-win32k-lockdown --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=13444,i,5330512218086897616,561552429348341831,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14732 /prefetch:14
                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                              PID:708
                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=15764,i,8723258175742311628,622172318564184430,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15752 /prefetch:1
                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                PID:4624
                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=14784,i,18039617143878305094,3814520462310607998,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15756 /prefetch:1
                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                  PID:3264
                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=14460,i,11307221052202835775,12541521699712117627,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=16924 /prefetch:1
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                    PID:772
                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=17056,i,7828594051158309643,16958627498798376028,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17072 /prefetch:1
                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                      PID:4736
                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=17232,i,3395251616829536588,8941891646091238132,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17228 /prefetch:1
                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                        PID:1864
                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=15128,i,13413142096822039116,3234920466241088812,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17352 /prefetch:1
                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                          PID:5052
                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=17124,i,4220602038151326416,3866698097680402960,262144 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:10
                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                          PID:7024
                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10800,i,6835851913399501583,6939577058948491402,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15708 /prefetch:14
                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                            PID:6152
                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10800,i,6835851913399501583,6939577058948491402,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15708 /prefetch:14
                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                              PID:4468
                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11052,i,16534978031110297445,16178311802474828795,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14768 /prefetch:14
                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                PID:5520
                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=13248,i,15644374522047228467,15371911236324392813,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14492 /prefetch:1
                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                  PID:2976
                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=16280,i,754912232346602802,10685559902740316676,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15820 /prefetch:14
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                    PID:8032
                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=14460,i,617115358074751982,10024886567886542254,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14808 /prefetch:14
                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                      PID:3360
                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4068,i,14204247809974799091,5565511995079521042,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:14
                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                        PID:4536
                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=16624,i,17823984902654736399,17763345377010482726,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=16728 /prefetch:14
                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                          PID:1268
                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=16588,i,8184506288651430974,15473348743544431471,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=16744 /prefetch:1
                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                            PID:6784
                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --init-isolate-as-foreground --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --metrics-shmem-handle=15720,i,8756050963603712668,10214394856736291131,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=9080 /prefetch:9
                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                              PID:4608
                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --renderer-sub-type=pdf-renderer --pdf-renderer --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags="--ms-user-locale= --jitless" --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=15568,i,9569044028846066537,11225813164248447548,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=16036 /prefetch:15
                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                PID:4876
                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=16512,i,12544551060673409305,2027840592273057710,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=16152 /prefetch:14
                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                  PID:7724
                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3812,i,12165760232574619168,9893555507889369130,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=1028 /prefetch:14
                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                    PID:876
                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --always-read-main-dll --metrics-shmem-handle=15608,i,11100014826763636672,12722605708849430150,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17204 /prefetch:1
                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                      PID:7408
                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=16888,i,1143506763427367701,9666259338714108971,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17184 /prefetch:14
                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                        PID:5940
                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --always-read-main-dll --metrics-shmem-handle=15756,i,13819990451054317964,3872413382322482037,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=14724 /prefetch:1
                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                          PID:4168
                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=15252,i,12566268521281538030,11077160595686875512,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13376 /prefetch:14
                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                            PID:7708
                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10612,i,14875850220074732233,2014981976458563625,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15656 /prefetch:14
                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                              PID:8212
                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=16912,i,13756511310286218385,16382928343201636379,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17532 /prefetch:14
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                PID:8316
                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17524,i,10757354068279372559,8948846285942352347,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17688 /prefetch:14
                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                  PID:8368
                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17304,i,7045586106410642458,6382968695910870831,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=16824 /prefetch:14
                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                    PID:8300
                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --always-read-main-dll --metrics-shmem-handle=17748,i,2722481127741675258,11175716716511777461,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17736 /prefetch:1
                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                      PID:8664
                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17164,i,2338855471850780726,14196343048257261526,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17248 /prefetch:14
                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                        PID:8944
                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17132,i,15147427371667462794,16748587786281629501,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=16300 /prefetch:14
                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                          PID:8416
                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3172,i,6154182908148920097,16987675979106964544,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:14
                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                            PID:8476
                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --always-read-main-dll --metrics-shmem-handle=17292,i,1896891397874964797,25054006050009634,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17068 /prefetch:1
                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                              PID:3484
                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --always-read-main-dll --metrics-shmem-handle=1000,i,5550385744678363937,5183873238583572226,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:1
                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                PID:2952
                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=164 --always-read-main-dll --metrics-shmem-handle=13244,i,11075549506674470057,10287063676136659621,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17292 /prefetch:1
                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                  PID:9000
                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --always-read-main-dll --metrics-shmem-handle=17992,i,15909627772059687076,7673989101358545258,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17652 /prefetch:1
                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                    PID:3620
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --always-read-main-dll --metrics-shmem-handle=13244,i,3644754887565375533,9252264931885413788,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=18044 /prefetch:1
                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                      PID:876
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --always-read-main-dll --metrics-shmem-handle=17992,i,6092713074858671103,9117556488361388071,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=18064 /prefetch:1
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                        PID:3772
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --always-read-main-dll --metrics-shmem-handle=17424,i,2390098679826804231,9481057795677452907,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=13244 /prefetch:1
                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                          PID:3824
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --always-read-main-dll --metrics-shmem-handle=17484,i,7423020807440572214,15382905099145562606,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17464 /prefetch:1
                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                            PID:9252
                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --always-read-main-dll --metrics-shmem-handle=16652,i,14036432462841576141,224861141866507741,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17044 /prefetch:1
                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                              PID:9368
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --always-read-main-dll --metrics-shmem-handle=16928,i,9202765371507463266,10812966932908409671,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=15252 /prefetch:1
                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                PID:9992
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --always-read-main-dll --metrics-shmem-handle=18456,i,12704681452724817523,10566034604508264451,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=18452 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                  PID:10088
                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --always-read-main-dll --metrics-shmem-handle=18604,i,14287596354078634593,17024777033727179107,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17840 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                    PID:6344
                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=18352,i,7880399193740399285,7088674753792050914,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=18476 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                      PID:9784
                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=18476,i,13255846394668528832,737591679799789558,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17304 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                        PID:3556
                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --always-read-main-dll --metrics-shmem-handle=18232,i,9948384790598573840,3624260715107212863,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=18212 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                          PID:9368
                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=16924,i,16290436010190890050,6442484342608363279,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=18424 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                            PID:9764
                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17572,i,5681681074605953884,9217356441372466213,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17472 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                              PID:9492
                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=181 --always-read-main-dll --metrics-shmem-handle=18144,i,16280706622367828725,10478036874978136484,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=18112 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                PID:2764
                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=182 --always-read-main-dll --metrics-shmem-handle=18148,i,6641972240609713666,12285125156752536958,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=16736 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:7028
                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=183 --always-read-main-dll --metrics-shmem-handle=18184,i,665060065208655397,14775430020747013656,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=17416 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:3492
                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=184 --always-read-main-dll --metrics-shmem-handle=18072,i,12804598604460446432,2360814537624566383,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=18180 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:8828
                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=185 --always-read-main-dll --metrics-shmem-handle=18108,i,7262698185407805832,1639691103364024872,2097152 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=18028 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:8136
                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,8115084500098952601,15764193034212856648,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:4304
                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,2430275347318947330,1346671252241153968,524288 --field-trial-handle=2160,i,11001003679014724699,18036857552117176457,262144 --variations-seed-version --mojo-platform-channel-handle=7776 /prefetch:14
                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:8236
                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:3432
                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                            C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
                                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:8040
                                                                                                                                                                                                                                                                                                                                                                            • C:\Windows\system32\printfilterpipelinesvc.exe
                                                                                                                                                                                                                                                                                                                                                                              C:\Windows\system32\printfilterpipelinesvc.exe -Embedding
                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                              • Drops file in System32 directory
                                                                                                                                                                                                                                                                                                                                                                              PID:2484
                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Documents\printdoc.pdf
                                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:7728
                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\sihost.exe
                                                                                                                                                                                                                                                                                                                                                                                sihost.exe
                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                                                                                                                                                                PID:2080
                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\explorer.exe
                                                                                                                                                                                                                                                                                                                                                                                  explorer.exe /LOADSAVEDWINDOWS
                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                  • Boot or Logon Autostart Execution: Active Setup
                                                                                                                                                                                                                                                                                                                                                                                  • Enumerates connected drives
                                                                                                                                                                                                                                                                                                                                                                                  • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                                                                                                                                                  • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                  PID:8956
                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                PID:8640
                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                                                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                PID:8604

                                                                                                                                                                                                                                                                                                                                                                              Network

                                                                                                                                                                                                                                                                                                                                                                                    MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                    Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                    Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                    Downloads

                                                                                                                                                                                                                                                                                                                                                                                    blocklist

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                                                                                                                                                                                                                                                    • Size 105KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 292255856bfb4d1886ef5501a74f9a8f32029861d1ec4415f70cfee9fe6efca5
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    protocols.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    autofill_bypass_cache_forms.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 161B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    edge_autofill_global_block_list.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    v1FieldTypes.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 509KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    crl-set

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                                                                                                                                                                                                                                                                                    • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    settings.dat

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                    • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 6a6727a0a4fa4cb1a57a4c321f756d9dd6f44ea45d205327c5e7e5f18c2f6950
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    settings.dat

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                    • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 e365308021ade71cd7fd8bcb77743afa8328c70101415bb9b419c11ce7afa8b2
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    LOG.old

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                                                                                                                                                                                                                    • Size 357B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 ae6d144e733b1947960460a8e4be3ad0d4420c501348337b162f6c52b20af083
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    BookmarkMergedSurfaceOrdering

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                                                                                    • Size 6B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    f_0000c3

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
                                                                                                                                                                                                                                                                                                                                                                                    • Size 867KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 3a18c84c2f24c324c4ec03731e4dca5735d964d99e698838ef28dfbb47303842
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    f_0000c4

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
                                                                                                                                                                                                                                                                                                                                                                                    • Size 727KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 aea4ecc74d2cbb687bd6c6d1a4e69b49a91fa7f5a7b6b20aebdb8e4ba07e8d8c
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    f_0000c5

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c5
                                                                                                                                                                                                                                                                                                                                                                                    • Size 807KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 2a10b2ec36e70fd46566ee72def97036f60fe2832e6516c956b08054b48d49ea
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    f_0000e8

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e8
                                                                                                                                                                                                                                                                                                                                                                                    • Size 73KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 95f0582481c517b9aaadf864034a92458e7631b7555200cb80cc98695e6ff05c
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    f_0000ea

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ea
                                                                                                                                                                                                                                                                                                                                                                                    • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 3396049fde9681cb0673782a6ec5ac7714659e181d3dc2a9a606e3b02aadad4d
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    f_000102

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000102
                                                                                                                                                                                                                                                                                                                                                                                    • Size 92KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 51f8266dbc5292bb290b7adb23430270df2a033f64a4331fc33d96c0418c5709
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    temp-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 3bff26cab058cda36ab77816e3cd97af624baa617b9d1c8eabb2589cd54bbdf7
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 7aed5a115083d5636b2ff80424b18bdfb600a894c449e11f35f5a0326fffd32a
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 1b17f1a274ff4fb2abedaba62d18c8564432130f8df7c0abd7cb356b69ee85b0
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 84bb5308ed4388947da6d4e766092eb94ed9b070db7ccb0ffea527e326e51542
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 97ef5e183cac93a4f26e96420e0e3784c83b6a05a9b85d7865721e0ddb2b0e8e
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 ab1158800d7e29ba071529558847b64b99dfceaa0898a621cee722cd2126a718
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index~RFe598b3f.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598b3f.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 fade391bb82a55ae995ab4604cf1146c9844eb61cd9a5489490c17004aed5cbc
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 10f554a09d40fe408d4c4bb51b5b8dd61ed36cf5e4889276f7523cceb8df51bd
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 f2d74e5ef42cb3a1f8223daa29679c42055e1b5af0a2acd9a617d018e46da028
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 83a6bf2571576b30066cf66f13ddd7a4e0de35c0b472850cbf2c247dd3ee1e4c
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    SiteList-Enterprise.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    Edge Profile.ico

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                                                                                                                                                                    • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    verified_contents.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1782208576\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 6f64306515428487987fabde07ddf1646f64ad4e3dc4841e982d40ad91459822
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    filelist.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1782208576\CRX_INSTALL\filelist.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 134B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 543c0e50c16159439d3dfb3f1151bc64e2f5b60a0e3824c5f93c4c5c14dd945b
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    LICENSE.md

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1782208576\CRX_INSTALL\third_party\babylon\LICENSE.md
                                                                                                                                                                                                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 4135d3051e1bfdccf0440f6d8867a6dc1e39587694995479c3e29826e53aff63
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    babylon.js

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1782208576\CRX_INSTALL\third_party\babylon\babylon.js
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 b5a426a0769b378e196ab2698c14a326d86ab2443010e16e4ac3cdde06371e6d
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    typescript.js

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1782208576\CRX_INSTALL\third_party\typescript\typescript.js
                                                                                                                                                                                                                                                                                                                                                                                    • Size 10.4MB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 986134e07f34257fd85c084441c825d7d8951705a0b8c76b0d7c5499536cc959
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    DevToolsPlugin.js

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1793748394\CRX_INSTALL\DevToolsPlugin.js
                                                                                                                                                                                                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 fe217348fd4d7ea4969f563ea9dbfc778e6591098a6fb26f231f859bbcef0128
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    DevToolsPlugin.js.map

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1793748394\CRX_INSTALL\DevToolsPlugin.js.map
                                                                                                                                                                                                                                                                                                                                                                                    • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 1aa1227de1acd3b490b9fc09a2165788cb78afb9e0795a5d0a75f007206f907d
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    NamedFunctionRange.js

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1793748394\CRX_INSTALL\NamedFunctionRange.js
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1023B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 aa5606bd8607fbff0998828a2285421f67bf46c986217a23bf54b8b9c62f9e96
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    NamedFunctionRange.js.map

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1793748394\CRX_INSTALL\NamedFunctionRange.js.map
                                                                                                                                                                                                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 a03e6965ec2315ae26572a646e4477fa341630038a50762149a19978a91a2389
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    verified_contents.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1793748394\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 5b1fc94e2b28caf5ccbea9574de0e42c860401620f0763c10cabe3a05a7154ad
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    LICENSE.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1793748394\CRX_INSTALL\third_party\typescript\LICENSE.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 43692cfafa6a5c09136cfa0138b9c78efeb56ee6b9174553dbf704b888771f6a
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    typescript-tsconfig.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1793748394\CRX_INSTALL\third_party\typescript\typescript-tsconfig.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 91B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 69500e16f1f9355aee311a80fe52f531ba348bb7f6d4667a2d33c3cd75113759
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    typescript.d.ts

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1793748394\CRX_INSTALL\third_party\typescript\typescript.d.ts
                                                                                                                                                                                                                                                                                                                                                                                    • Size 486KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 2b06ea0beb73119a4294b56961eeb2337c6e706c8f0311de1bb49ca47c92abd5
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    typescript.js

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1793748394\CRX_INSTALL\third_party\typescript\typescript.js
                                                                                                                                                                                                                                                                                                                                                                                    • Size 9.2MB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 eb27b35a442aab5e5963127d468c1c4ba0009fa67e18b2faf73f5e1bc1ddc6ac
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    typescript.js.map

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4396_1793748394\CRX_INSTALL\third_party\typescript\typescript.js.map
                                                                                                                                                                                                                                                                                                                                                                                    • Size 6.0MB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 5842f1041fc42ef727b2fee220a55f00bf38eff815920207d8ae560169aef766
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    HubApps

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                                                                                                                                                                                                                                                                    • Size 106KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    000003.log

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.crazyforcrust.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                                                                                                                                                                                                                                                    • Size 26KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 a366de9929f6cea4ba6b85fac55c3cb789216cc58e45e5fc896989bfcaff4b29
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    LOG

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.crazyforcrust.com_0.indexeddb.leveldb\LOG
                                                                                                                                                                                                                                                                                                                                                                                    • Size 363B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 8b585308b8bc55c6c6f4173653b748e00a43bed7378bd386671d66a5c3ea8660
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.crazyforcrust.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                    • Size 23B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                    • Size 80KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 629df86f978d15b3fc639e6ac4c76bab9bd10142c33a0519f4aab9b40d244045
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                    • Size 56KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 61c5106f47fd7d226eeeb85635efb144432258dee0353605187dab1a32b8044f
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    SCT Auditing Pending Reports

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                                                                    • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    Sdch Dictionaries

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                                                                                                                                    • Size 217B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 898ae929e55f39a8ce651353eea84220277ab43b441472c89eca81e0ed72cde1
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Sdch Dictionaries

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                                                                                                                                    • Size 217B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 15ed96e738e4ae0f309840679e5bb93eb78dc19deb6d45469564fb638919c8f5
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Sdch Dictionaries~RFe5a83d7.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5a83d7.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 40B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    ea2f9b4c-bb0d-40b0-98be-24744b39faf0.tmp

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ea2f9b4c-bb0d-40b0-98be-24744b39faf0.tmp
                                                                                                                                                                                                                                                                                                                                                                                    • Size 111B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Preferences

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                    • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 8938b63d70523ed97a3393cd6b48256a48920bf6a8876c1d174684e6c7fb3d9f
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Preferences

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                    • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 34d07fbd31aaaf812084a30908fc947b15b1e25f1a5bcabf381598b18b0b4e0b
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Preferences

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                    • Size 62KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 b82327327df79566f5c12e1b3a01c5aedebd2d71a414de8512c182dc212f8a5c
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Preferences

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                    • Size 58KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 e34f9a293f36cd6d96552f982148fcccfb75abd43fb63c42b5d0037d919a4c85
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Preferences

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                    • Size 55KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 bbff13d4e687399034ce5023ba94c03929f6be1121f10662ac4d0eec504f64f9
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Preferences

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                    • Size 31KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 bb9d39704b447b6ee58477bc28e8b9be1cb51c45a3884528232b0693b5629af6
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                    • Size 39KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 55bf53749cf396e83312aaf16348edbd43b5d0343b357d61f9c28ac9627c3be6
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                    • Size 36KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 42f62ce15d357610b877fb82bd086db6e238e180667d393851c3448f68b0863a
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    21a0e54942938b42_0

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3491d3041141ebac1db10cd1d8aabb429a678bdd\561a6a37-1dc3-4e8d-9b13-7319b25e298c\21a0e54942938b42_0
                                                                                                                                                                                                                                                                                                                                                                                    • Size 318B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 b02169f60f8654443602a64cdecf8e27f2c54aa92d6ea0a38785d3813eed41af
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3491d3041141ebac1db10cd1d8aabb429a678bdd\561a6a37-1dc3-4e8d-9b13-7319b25e298c\index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 24B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3491d3041141ebac1db10cd1d8aabb429a678bdd\561a6a37-1dc3-4e8d-9b13-7319b25e298c\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 7d8a2f4abc6a3563e0c9974fef8ee90003e1c869c71e8f0f9814be8e6eed2f88
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index~RFe598488.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3491d3041141ebac1db10cd1d8aabb429a678bdd\561a6a37-1dc3-4e8d-9b13-7319b25e298c\index-dir\the-real-index~RFe598488.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 fdc6771f032216d322f27d43700ac958abb9d37ef69ec0de84f11cefb2e235be
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    index.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3491d3041141ebac1db10cd1d8aabb429a678bdd\index.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 109B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 00b274500f38d3eceeaa773ef984baa4b85e38b7b9b5f0ab0d1f5b84afa3610c
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    index.txt~RFe5984c6.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3491d3041141ebac1db10cd1d8aabb429a678bdd\index.txt~RFe5984c6.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 115B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 49607a21ab3ebf09c9e0fa55450767ca4d2e69b058a51961e32796514a28ca94
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\99e5121c-43d3-4839-96bd-5b748d65f89d\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 7eec92b90ad1645d85c4ab729fcd72a779ed8c767dbfa520b4a7397c7364eb8c
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\99e5121c-43d3-4839-96bd-5b748d65f89d\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 a2dbbf90e0e197cde6e1579334477adcd83617597a3f630052f54ef77860deb3
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a79fcb8f-822d-4962-8b2f-1c13b8ddcfb6\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 e191b3548932f4fd499aaf3022b9da13596a7d857f181a2e0812a1834c5b2126
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a79fcb8f-822d-4962-8b2f-1c13b8ddcfb6\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 adcf4c895e3d20d37d7983051f4c8b30219e84b371f229c38c58d44e1022bccd
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index~RFe5c9756.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a79fcb8f-822d-4962-8b2f-1c13b8ddcfb6\index-dir\the-real-index~RFe5c9756.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 0801c4b5cd28181cdfb37fe190b65e5bce576f6031b8558da4a8f233aeb922dc
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    index.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 474B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 f091c8f866f611836f1a7f12325859cea44b9306988bb6a73ddac32fef362365
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    index.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 474B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 da93a51eafa70b8fc1045e29a7c12554aca982ed626997226c92a3f6c44af705
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\01ce5dca-9432-45cd-adbf-7cab11ead246\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 288B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 158ccd3a6cec2d7f3c18c4be0ef32c5bf847076063f9db3a2af38a5085f7482f
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\01ce5dca-9432-45cd-adbf-7cab11ead246\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 312B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 8beecd36dbc2f37720d99bb2814047e575ab0a39b255f3bffcb5f227b88ea6e7
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index~RFe58c5db.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\01ce5dca-9432-45cd-adbf-7cab11ead246\index-dir\the-real-index~RFe58c5db.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 a3d7e142a7eff5c6e88e915c97f0183d05d1848e972088dfcf2d4d89d4a11a14
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\75c0c3ed-3224-4284-98c6-c73be3ad00f2\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 ce8288f4ce25eac5f1b8c344fb9e5d278df122478438ac1300fe2d597efcaf52
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index~RFe5859a4.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\75c0c3ed-3224-4284-98c6-c73be3ad00f2\index-dir\the-real-index~RFe5859a4.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 89de68971c5bb1cdabb8124edfd941a056a1ab2069fe13f1f7a5298b5d3d5572
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\d9ab0ae3-5964-4923-a451-bf2c8dc73d1b\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 fcd2cb80a5ab0a9274246655e3fc0030d4bdea9f71a1595007d278fe5d46ee03
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index~RFe586f8e.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\d9ab0ae3-5964-4923-a451-bf2c8dc73d1b\index-dir\the-real-index~RFe586f8e.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 60029835a45206c37c01854f338e6d9ab3bc6dadc1f99067c10db7c1ffaaba11
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    index.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\index.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 249B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 f2abc946186dcc11443f3046db3fc37e5c94b45ae8eb2633b3742b5a041dbbe9
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    index.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\index.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 360B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 3deae2715bd7d67056e2a5847f3c647cd04975c40355c80f8df99ad70e57c021
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    index.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\index.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 355B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 31aa08d9249dc3b42246d47e56951051ba9b633b6febbfa611758864cb0226d5
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    index.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\index.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 355B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 6c0617d678d1607ca94c5cc62106e3baf92bddbe5049ea63c5da7f75107d56f1
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    index.txt~RFe5817f8.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\8aae3c62756bf96eb6f7213ba75c3e2090afdb0a\index.txt~RFe5817f8.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 191B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 b6fe4f08733c471004465783c281170e710e7a43b0ca58ffb99e9791f135bc8e
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 240B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 70bbe34b1e20d441800f921ddad59d300a8148ded55c398ed9a8590ce19b4461
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                    • Size 216B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 58ae7b1becf74117357f0840c9b703b9baccc5e19bcc1bff5329e62e3f1b1261
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    the-real-index~RFe585908.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585908.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 48B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 d6bbd27406644a8e482244d752bee136ecbd76cb52719415980d6831ba975c6c
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    sync_diagnostic.log

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                                                                                                                                    • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 a92831eef477efa2d0150a9807be34a71897ce1e5f9e56a417d9d671b73769ac
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    CURRENT

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                                                                                                                                                                                                                                                                                                                                    • Size 16B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                    • Size 41B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    index.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\index.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 231B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 0a3beef6517a8d6e5f07a73f814383800d97246cf53b821c11f011853832041c
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    index.txt

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\index.txt
                                                                                                                                                                                                                                                                                                                                                                                    • Size 147B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 ad6b8c01554d3fd60dec4f6d2a49d994355e92b30b86b56784fb773f286f1940
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    index.txt~RFe5973bf.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\index.txt~RFe5973bf.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 154B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 4932fe129c83c362eacc240ab5d7c314511f6629b617a60ee88a3f78277d852f
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    3d7c5b4a-73d7-462f-b202-7c4b9e3f1de3.tmp

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3d7c5b4a-73d7-462f-b202-7c4b9e3f1de3.tmp
                                                                                                                                                                                                                                                                                                                                                                                    • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    OperationConfig

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                                                                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    office_endpoints_list.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Local State

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                    • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 95ff602bf1ad45631778df387409d1a7fe7f3e08302e6b71748b14ab39475cc2
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Local State

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                    • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 368b22eb21d89c8e7c1eda79c2628267cee24154d449279a61e3103a14c46074
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Local State

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                    • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 a764620fb921edfd6ba64a47c6e95bf4e4d90a8c30018f2340670feb694e8389
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Local State

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                    • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 06b41c5631b86299ad5b381708fcfbf9926ffa18bdc62e22e60d1d481f3634a1
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Local State

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                    • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 21158cbf8e43e2cc1fdc748ac9d95c4449cbdc0a92bc651d7c1298d274c995b7
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Local State

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 f899059555a240ad04b367ed16c5a29da896a3141c3008477137ff656c784d72
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Local State

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                    • Size 28KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 f9e7be894e55c759e3406e15dac8991790f9230ca44e9d8e6694cc4110b740f3
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    Local State

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 e59364314430739c8a3924c7f62b1ae1bc51aa136828bdc7ce1292d42c54a3aa
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                    • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 bd6c9a3249c691200f2a6bf17a8c6d69a3f56af3ad5e6280344f1239fff73c73
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                    • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 9423b4a6d6691db8089e85f9bda1a5521145d47c45fc9cdaddc73c8058a6c0c2
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                    • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 5cad0e8f57c76677372a085f791cad81ae0b53b25f62f9cdd0175bd9e3469060
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                    • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 4109d21c48dc41fde944edf8168393aac98d13100cea8e7ccfd3094ca94b21a6
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                    • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 bcc2bfeb52247b47ce4131f8bc3f96363e2220a449fb870a30dcc952e6ac3cf8
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                    • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 4068d7c46e5f2b6cf973ca91841eb511dd5488b5c30aa8ff1a0bd068e121b8f0
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    RevisitationBloomfilter~RFe5af752.TMP

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5af752.TMP
                                                                                                                                                                                                                                                                                                                                                                                    • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 d7071b54c9847e91c557713479767ca9ce4d68b03c0d9479949c3c9d14295c0b
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    safety_tips.pb

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                                                                                                                                                                                                                                                                                    • Size 163KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    typosquatting_list.pb

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                                                                                                                                                                                                                                                                                    • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    keys.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    nav_config.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 372B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 692457b7a9a71da2f86a2d9c00ee5e439ede0bfca8d82ca033d6f592dbfa5469
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 9067b28ebe20c02c9953fff5b0594ef49080bdf69debedc37cf9eb19498d7c06
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 5c220d43256d7b7c14b900fd4eebfd1eca6e209cfec86546e89032558d063e17
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 252B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 132B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 492B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 732B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 852B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 612B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 45a6b06e48cb3eedac93a0d53aa71f535bd43cbf956b7e1b9214bb14d119b498
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 972B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    metadata.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 33b54581b3cd7004077c0a607bf56966799274b2c161a1665f98c099812af2dd
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    189fd222-2119-47e5-9d32-1ca4c465890c.tmp

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\189fd222-2119-47e5-9d32-1ca4c465890c.tmp
                                                                                                                                                                                                                                                                                                                                                                                    • Size 13B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    47a7eeff-f3db-4d74-8d51-89e5ae550652.tmp

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\47a7eeff-f3db-4d74-8d51-89e5ae550652.tmp
                                                                                                                                                                                                                                                                                                                                                                                    • Size 2.1MB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 efdad7555293ec2d14399c2c2fc9d07228de1f6e3746b27da621b76fe5ceea07
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    63c1dc6a-04c0-448c-b1ac-6df83d7b14b1.tmp

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\63c1dc6a-04c0-448c-b1ac-6df83d7b14b1.tmp
                                                                                                                                                                                                                                                                                                                                                                                    • Size 3.0MB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 2d69203739eca77886457d27c0df44eca47da02810061a7f5e15288c2e643f23
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    bec39af9-c2cd-46f1-9d69-94cd75f83dd5.tmp

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\bec39af9-c2cd-46f1-9d69-94cd75f83dd5.tmp
                                                                                                                                                                                                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    dc5c06f1-f208-4491-87fe-a4ef5b630fb8.tmp

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\dc5c06f1-f208-4491-87fe-a4ef5b630fb8.tmp
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    DevToolsPlugin.html

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4396_1192628906\CRX_INSTALL\DevToolsPlugin.html
                                                                                                                                                                                                                                                                                                                                                                                    • Size 220B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 fd59488175e43bb4713fd621e785b618fc647a3521d305874722bd6b7fd1c649
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4396_1192628906\CRX_INSTALL\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 766B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 072441aff81b94a2d6a4cb7e86c40fe27ae8a9701f7d466f76db124fd3d54330
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4396_1502396119\CRX_INSTALL\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 658B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 fea905b763b26db02673c6ab14f422b21eff64de59351f0818b501dd4e7f9430
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    content_new.js

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4396_1930293677\CRX_INSTALL\content_new.js
                                                                                                                                                                                                                                                                                                                                                                                    • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    dbd7ed68-e285-45d5-8bc1-09d1291b5f8c.tmp

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4396_697525128\dbd7ed68-e285-45d5-8bc1-09d1291b5f8c.tmp
                                                                                                                                                                                                                                                                                                                                                                                    • Size 147KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                    • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 9af0721b2551909b9be260fc74b0d72674cf51bb914b6161cec03e719a53c2a1
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    ccba5a5986c77e43.customDestinations-ms

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                                                                                                                                                                                                                                                                                                                    • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 04d9a2d1a26c2e95b9e14460ab4f52b63340aaf60eab6bcee5f5dd5ec60e9a3e
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_1060589227\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 177B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_1100886765\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 160B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_1117941375\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_1204511323\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 160B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_1249521263\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 85B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_1403799973\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 43B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_1431180061\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 135B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_2110163661\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 113B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_449671537\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 119B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    LICENSE

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_669060118\LICENSE
                                                                                                                                                                                                                                                                                                                                                                                    • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_669060118\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 79B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    manifest.json

                                                                                                                                                                                                                                                                                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4396_716330528\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                    • Size 135B
                                                                                                                                                                                                                                                                                                                                                                                    • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                                                                                                                                                                                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                    memory/2484-2024-0x00000207F2C50000-0x00000207F2FC8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                    memory/4468-1842-0x0000028339920000-0x0000028339C98000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                    memory/5112-840-0x000001F568540000-0x000001F5688B8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                    memory/5112-845-0x000001F568540000-0x000001F5688B8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                    memory/8604-2778-0x000001A3FDE90000-0x000001A3FDF90000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                    memory/8604-2747-0x000001A2FD280000-0x000001A2FD2A0000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                    memory/8604-2748-0x000001A2FD220000-0x000001A2FD240000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                    memory/8604-2679-0x000001A2E9020000-0x000001A2E9120000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                    memory/8604-2673-0x000001A2E91E0000-0x000001A2E92E0000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                    memory/8604-2780-0x000001A3FDC30000-0x000001A3FDC50000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                    memory/8604-2829-0x000001A2FD100000-0x000001A2FD200000-memory.dmp