Analysis
- user interaction
yes - max time kernel
1050s - max time network
1051s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
11/05/2026, 02:27
General
- Target https://mainnet-fix.web.app
- Sample260511-cxevdsat51
Score
8/10
Malware Config
Signatures
- Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
- Loads dropped DLL 2 IoCs
- Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Looks up external IP address via web service 7 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Drops file in Windows directory 64 IoCs
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
- Checks SCSI registry key(s) 3 TTPs 58 IoCs
SCSI information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 5 IoCs
- Modifies data under HKEY_USERS 2 IoCs
- Modifies registry class 50 IoCs
- NTFS ADS 2 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of FindShellTrayWindow 64 IoCs
- Suspicious use of SendNotifyMessage 64 IoCs
- Suspicious use of SetWindowsHookEx 4 IoCs
- Suspicious use of WriteProcessMemory 64 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://mainnet-fix.web.app1⤵
- Loads dropped DLL
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- NTFS ADS
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x300,0x7ffc4929c188,0x7ffc4929c194,0x7ffc4929c1a02⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,7060295774186131128,12352580874107010637,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:112⤵
- System Time Discovery
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1588,i,7025015745613953681,6217236925585688556,262144 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:22⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,2293011690017905456,5086420895289915958,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:132⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,7608834404739970721,16091946854497807436,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,10531244465448582178,12418421366521182314,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,5921802171726968171,15889437636684954228,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,1539851889591109777,2140314489165039336,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:92⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4228,i,16576342644261234637,7238546414144427089,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4312,i,4305472170691184573,4997559741089293361,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:92⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,9189255738492022315,488988104047418828,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,14538188441856362363,440484277614259139,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,6904366602853946027,6469663154384766730,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,5340773323709704028,9666280963985879860,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4152,i,1159601090471106058,8473157383318476679,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:142⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.execookie_exporter.exe --cookie-json=11323⤵
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,16573941579524371523,9371937539666237462,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,16573941579524371523,9371937539666237462,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,7080626702413401069,12242894816035736615,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,2807942390167203215,14732684334600810754,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,15011239237710297403,6085293506902561917,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,4645637192569368090,14429404170933800267,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,7958491116319384282,969237002607430021,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,17002923217969009497,12979561967896077011,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4168 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,11066364868304912217,10633457261545682017,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3404,i,10441937531719981096,13392425009082358652,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4696 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5784,i,4471841152161193975,5374318836526804603,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6672,i,6939442859875522423,15179919600442787303,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6808 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5732,i,12814027080609461861,8041331401350679907,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=4188,i,16735187771111009146,1321274108349398103,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6604,i,4915818382089698185,18383675098406606328,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7140,i,14564286017557927978,16946987235484317021,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7008,i,1391327963686130811,3883680803967387896,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:92⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=4236,i,922235108028575508,10562903921746883231,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5908,i,1810638219313946486,12744996865003647658,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6980 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,13722508829194336370,14036287585359251615,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,11239023732878175685,6101708351626398533,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:142⤵
- NTFS ADS
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7656,i,5330480133071069411,4859838359548912152,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7548 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7764,i,911591500089950433,10864257589292846172,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7768 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=6652,i,2667369365144621017,6927522305496606242,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:92⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=4504,i,160969437771373380,3550360280659959742,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6768,i,10816005646738953122,17974901589539480012,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=3276,i,8809332029171720345,17221676086210053796,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=6332,i,9699382073413065574,20949143830142534,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6912 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7512,i,7194450902177044231,2852728662513601287,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,7582702544313626920,13432742917029507109,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:122⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,13407471936293021591,10996611821337137511,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4532,i,9362632518610498723,6504694692063686421,262144 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7716 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4332,i,5865152951509548380,5012753116090964028,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,17421301301593229646,14968184361753050998,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,3613065336407382104,3115750924776970056,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7856,i,4323304749452666254,2336848304100369079,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7872 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,17016557807123771721,17113986748908189489,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1036,i,2052618048062561236,10450523097735135804,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7932 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=7652,i,17943580168377929757,12440801158922164939,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7996 /prefetch:92⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8088,i,346073289659077234,12864738458546702466,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8052 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7996,i,9326393141905372196,13534335705622041663,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=7980,i,16991840150389047186,7082389971238437962,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8028 /prefetch:92⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7888,i,14755720427217551312,7252895139071680701,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7988,i,7641785363426793065,2919323782198842088,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7992 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,15634619076441145799,18045870975752110039,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=8044,i,10588352538437542187,14014021975026708297,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:92⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=5544,i,9752452554545262563,12293284514923957465,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7952 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8264,i,16116797732607111313,8514802294872008016,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,5585504904712955644,5542906884811943611,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8256 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=8268,i,4823880228263870313,1624128374380499664,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8500,i,16085840698350653386,10072423982918821489,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8488 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8520,i,5996149015999075404,4909436687252527392,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8652 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8484,i,4259661067531524801,11874091395517200490,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8824 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8804,i,3283708493141203904,9318894364256413660,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8980 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=9128,i,9560644991716417963,13822414532716252803,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8512 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8352,i,6662111396508556683,13021778536162711136,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9032 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9348,i,17747393654016923645,11862260026089821888,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9300,i,4116989749910549428,13632707006506640330,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,11379468791928464019,4377188734050372374,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7232 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=6812,i,11990641713704884948,1471451926962232312,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=6840,i,2565951596350060784,18438855288067353651,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:92⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=9456,i,9191881770435286402,6663740567609619731,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9500 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=8044,i,11913988132564675927,15140660347205301599,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9548 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=6684,i,7363370880506820045,16313967259577398865,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=9520,i,12989451522186363776,3092878971155014438,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9000 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=8844,i,13744735635261818260,17567326720579140694,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9688 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=8864,i,12098729857662784718,8145851106512279475,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8916 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=9828,i,3394778961049213951,9914329269800197626,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9848 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=9872,i,264371526949360066,3806853032255792160,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8528 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=9896,i,16446996255366670336,10584141189591575262,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8604 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=9280,i,8976186631326477859,17973104975683736659,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9920 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=10324,i,11200456560692253056,3761582229511354723,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10340 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=10536,i,14459367223764640919,18189973735323510848,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10836 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=10548,i,9388299659222267501,8728719054713693440,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10828 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=10560,i,16846500570146807329,4035766615589356006,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10180 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=10572,i,8990153723608064603,9394394423593726038,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10772 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=10492,i,7604498792965179684,11843911192597548877,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10876 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=10584,i,7272004159213459060,8343854647294951502,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10972 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=10596,i,9634393405774213133,7875872072297079632,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10976 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=10608,i,9523099205199381917,14573884332959562175,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10988 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=10620,i,11690729818135721133,4609007388389889613,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=11056 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=10644,i,15538727593345454604,636074329926669034,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=11040 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=10632,i,12109164381454994412,4206466218437340334,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10980 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=10508,i,6863449184856072164,11489780849480571663,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10752 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=10524,i,4290416148487233510,2307378495046855794,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10756 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=12728,i,17866687598906434825,12221253538241996868,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=12744 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=12844,i,1134181557002749539,4486186594849691254,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=12824 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=13020,i,11593228838438651736,12091616968926585565,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=13072 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=10248,i,11887973418137289172,10918095750504814918,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10124 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=9820,i,2423723043840490947,17747842674709413890,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8540 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=9652,i,8653828907927116178,11141088165735943133,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8632 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=6788,i,3288966692070326516,6145625087234177964,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9316 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=9592,i,1722056585609982353,5114137214184896659,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9620 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=11868,i,15574510058396559192,8218198464554209136,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9636 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8556,i,6480071592045456299,16997422372355014829,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9440 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9884,i,9485221177267900547,13194814764133592074,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=5648,i,8584497442696121006,6259148440770311553,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9956 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=8600,i,534043231855135663,5771071053439636987,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=1992 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=9824,i,5234197438011631273,8315470776728342367,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8020 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=10416,i,10682708900946282359,915157143177278843,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=11000,i,6564828530154577312,5694255510167459310,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=11836 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=9312,i,17748408581311794086,2022651656402789410,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=11956 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=11976,i,3299583170619713845,3904157995250806915,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=12012 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=9568,i,15936509638604732491,4135287238705729834,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9004 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=11776,i,9053622037740302924,14928975181774404984,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8608 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=11132,i,2680522580724618631,3665288157019701584,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=11652 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=12236,i,9403929423894629092,11215046393740590932,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=12228 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=12360,i,15248585026668508532,7286281974423357384,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=12756 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=12948,i,6919697630230935121,12750157998147465153,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=12428 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=12420,i,12161566366109773144,18349036640532915069,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=11132 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=10688,i,13861135921383487185,2487609841798980326,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=12392 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=11504,i,12459556478365404279,15563903629453821889,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=11384 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=12052,i,4775919459052622401,17353879817958083326,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10132 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=13036,i,15289381469960765642,1733673621048933203,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=12104 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=11164,i,13142273479548688580,8963027770048054552,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=11116 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=10548,i,2837060399816265716,15050246733985777921,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=12204 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=4176,i,14077939978700726457,15254763514953431146,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10912 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=5556,i,14243304600651043358,11647351904178267712,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10736 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3984,i,16876763771592296648,13111620549380205035,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,9768601415318415243,13076488454135585980,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=13300,i,16281409167127875666,3221754600483567781,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9252 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --always-read-main-dll --metrics-shmem-handle=10028,i,16650234230621476444,10250522163793494733,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8912 /prefetch:92⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --always-read-main-dll --metrics-shmem-handle=10312,i,11203776863589543936,16229276855708590721,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7968 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9852,i,16558841326485222480,213437199320038341,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10904 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --always-read-main-dll --metrics-shmem-handle=8812,i,2338116367723601121,2842450802778527628,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=10188 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --always-read-main-dll --metrics-shmem-handle=8568,i,1559950095303132361,3680311321575293543,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9020 /prefetch:92⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --always-read-main-dll --metrics-shmem-handle=8740,i,3916024347872079388,5415522319063111120,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --always-read-main-dll --metrics-shmem-handle=4628,i,11732188434361372229,5984399825326417138,2097152 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=12456 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11376,i,4569271724404443767,17455173027457029270,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=9652 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3992,i,10933069638005892993,8363796100542316166,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=7912 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7872,i,14036828446109283039,18353815318456076002,524288 --field-trial-handle=2204,i,7366414965811549304,1205731352070748977,262144 --variations-seed-version --mojo-platform-channel-handle=8148 /prefetch:142⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵
-
C:\Windows\system32\sihost.exesihost.exe1⤵
- Suspicious use of FindShellTrayWindow
-
C:\Windows\explorer.exeexplorer.exe /LOADSAVEDWINDOWS2⤵
- Boot or Logon Autostart Execution: Active Setup
- Enumerates connected drives
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
blocklist
protocols.json
autofill_bypass_cache_forms.json
edge_autofill_global_block_list.json
v1FieldTypes.json
crl-set
settings.dat
settings.dat
LOG.old
LOG.old
MANIFEST-000001
BookmarkMergedSurfaceOrdering
f_000088
f_000089
f_00008a
f_00008b
f_00008c
f_00008f
f_000090
f_000091
f_000092
f_000094
f_000095
f_000098
f_00009b
f_00009d
f_00009e
f_0000a2
f_0000a3
f_0000a8
f_0000b0
f_0000b6
f_0000cc
f_0000ce
f_0000cf
f_0000d1
f_0000d5
f_0000d6
f_0000d7
f_0000d8
f_0000d9
f_0000f4
f_000125
f_00013b
f_00017b
f_0001a9
f_0001b7
f_0001bf
f_0001d9
f_0001e8
f_0001f0
f_000213
02d1abc315c563dd_0
036b14c2ad337207_0
06355fd5fbac9e06_0
08493dd8cf0bc1df_0
1871b155b4ecaa7a_0
1e6e0b12aec2948a_0
1fbb2501bac32c9b_0
24860f942c315255_0
25eb276901036c63_0
2849eea9ecb70e32_0
284bd4cab2786126_0
2ab5510ea36227ff_0
3079751eccd3a89b_0
336a68eaaf209f48_0
34b85475d7678497_0
37bb2d833f0ece57_0
3c7fde0fb4e5eb3d_0
3d646e327b978d33_0
4201118fd7056e63_0
4239c3bd9acd2852_0
4a1908f21f515ef8_0
4ce187022b5cadb2_0
50658742600c04ba_0
53e2f66da026b4f9_0
5ecc2ab3bb0fdda9_0
6a0ded3c57d58e8b_0
6d7c5a50bb2ffee1_0
6fbd29076e2e554d_0
7105b88c24304503_0
78d9756dfbbf2de9_0
7a016c727db3af90_0
7a02aa59ff61288b_0
814fb72d15cda249_0
819229b5a7171411_0
822534f4e7002ee7_0
82e51452e4cc92c3_0
864903a18eed78f1_0
90b389dc14458ae8_0
9a7fc863f42e3312_0
9b7b59937a0aad0c_0
9da14049ee8cc205_0
a0ffbea3fe220143_0
a76a06c3372d980e_0
a90751655703c2fa_0
aa645b6244f4e97d_0
b93371140af98f6c_0
babc2eee5419722d_0
be042d3d330e9894_0
c0724e605377fde2_0
c3cb997b6dbf2f2d_0
c835230aca8491af_0
cb3ad24c342b47a5_0
cb9bb240e50b671c_0
d028c652279753df_0
ddaf970459484ce8_0
e02284c5bcb16427_0
e72b729ecdf02d17_0
e8f2aab873c329ca_0
eac861d92777f9b6_0
f2e9ea2c6a5d275c_0
f9ece0d5a38ff5d6_0
ffc3dbc2e1afdb4a_0
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
SiteList-Enterprise.json
Edge Profile.ico
DevToolsPlugin.js
DevToolsPlugin.js.map
NamedFunctionRange.js
NamedFunctionRange.js.map
verified_contents.json
typescript-tsconfig.json
typescript.d.ts
typescript.js
typescript.js.map
verified_contents.json
filelist.txt
LICENSE.md
babylon.js
typescript.js
ActivityItemDetail-RTJZ4RTK.js
AdditionalPermissions-XTCLDUW2.js
ApproveUnwrapFungible-MVF2BXZU.js
AutoSlippageOptIn-OCNBR7WC.js
BitcoinAddressTypes-VHDVSS6M.js
BitcoinSellWarning-RYQZQAIR.js
CollectibleBurnPage-OWYMJ4XG.js
CollectiblesVisibilityPage-HLLG5IRC.js
ConnectHardware.js
ConvertStakeAccountListPage-GYVWJVM6.js
ConvertStakeAccountStatusPage-3ZWX52EC.js
ConvertToPSOLInfoPage-O4SYNNHY.js
CreateUsernamePage-2JEVYZKJ.js
DepositAddressPage-2EDK7YLE.js
EthSelectWallet-EYVXDPYH.js
ExplorePerps-D5IJY3WA.js
ExploreTabPage-RP6JQRHA.js
ExternalLinkWarning-TWKEC7M6.js
FiatRampStart-ATR3XD4C.js
ForceUpgrade-YXIWZPH6.js
FungibleDetailPage-RQC2UX72.js
FungibleVisibilityPage-XPG5PCNO.js
HomeHeaderRightButtons-ZCNVC2XG.js
InstantSellSummary-YKXRJNMB.js
InsufficientBalance-PZBFZV5T.js
LNWAZHJI-KNO6A37Z.js
MWZ6AO7Z-3IRLB2CE.js
MessageOverlay-KHG7HO26.js
MintJitoSOLInfoPage-RJYJUBMQ.js
MintLiquidStakeAmountPage-LHFIGTTI.js
MintLiquidStakeStatusPage-VFUZRMK2.js
MintPSOLInfoPage-UAI3IU5M.js
MintPSOLUKInfoPage-XYCAGRKD.js
Modal-GWJ2BRJC.js
NetworkHealth-PVJG6EUC.js
NotEnoughSol-2PMQ7GNK.js
Notification.js
Onboarding.js
PSOLMarketingPage-OKBY2DON.js
PendingTransactionDetail-7KXMF4VW.js
Phishing.js
Popup.entrypoint.js
Popup.js
PortfolioHomeTabPage-BKIEPD65.js
ReceivePage-CTWQWVQ5.js
RecentActivity-CFSFLPJX.js
SearchPage-VECKUMDA.js
SendCollectibleFormPage-MHJ4C6UQ.js
SendFungibleFormPage-ZB7RE3IA.js
SendFungibleSelectPage-G2W2NMXI.js
SettingsConnectHardware-AIBGLIUC.js
Sha256SeedCorruptionModal-J6SK4OCI.js
ShortcutsModal-AZJSTOBA.js
StakeAccountCreateAndDelegateStatusPage-PDVDR5GH.js
StakeAccountDeactivateStakeStatusPage-UTN4CTTU.js
StakeAccountDelegateStakeStatusPage-RWADPG6J.js
StakeAccountDetailPage-FFILCUPN.js
StakeAccountWithdrawStakeStatusPage-MWYGSE2S.js
StakeAmountPage-CIXYUGOG.js
StakingMethodSelectionPage-GMLVC5AK.js
SwapConfirmationPage-JB5RNJX6.js
SwapLedgerSigningStatus-QNF7HNOE.js
SwapPricing-2YOOKNBO.js
SwapPricing-X34F2HHU.js
SwapProvidersPage-UJZG4NTI.js
SwapSettings-MATRS7ET.js
SwapSettingsButton-3CGN53VU.js
SwapTabPage-UZXI6LCK.js
SwapTermsOfServicePage-LXBM63BS.js
SwapperSDKSwapConfirmationPage-C4OU34JP.js
TradeButton-N2I54CRT.js
UGCTradeWarning-7JSZMHAJ.js
ValidatorListPage-XDVV2Z7W.js
WarningInfoModal-UT5JJEET.js
verified_contents.json
browser-polyfill-52YP62EY.js
browser-ponyfill-G6CXPAFO.js
chunk-2EV2CEOV.js
chunk-2JDLCWUG.js
chunk-2JKW6MYZ.js
chunk-2OVY4GZB.js
chunk-2S3XUOBJ.js
chunk-32GRFTZW.js
chunk-35OI4BQM.js
chunk-35TCDNFL.js
chunk-35VNG2AB.js
chunk-36FODMJL.js
chunk-3PZPT6HA.js
chunk-4AQPJCXC.js
chunk-4DKOLVIV.js
chunk-4FES7M6X.js
chunk-4IGGAIMZ.js
chunk-4KIYPLYV.js
chunk-4KZL5R7W.js
chunk-4LEFXYMU.js
chunk-4SQ5ETC4.js
chunk-4UZ62P35.js
chunk-5INHQNVU.js
chunk-5M4YNGA7.js
chunk-6RXR5X7V.js
chunk-6ZVXTQVQ.js
chunk-7GTBDIS7.js
chunk-7NESUNEV.js
chunk-7YNR673C.js
chunk-AAGSJDQ5.js
chunk-ABIAQLBL.js
chunk-AI7E5XSE.js
chunk-ALTZJSDQ.js
chunk-ANPHF7DB.js
chunk-APRBWPN6.js
chunk-ATUTADYU.js
chunk-AUOG6CT3.js
chunk-AV2EUQVH.js
chunk-AZOU3L26.js
chunk-BER3FFHS.js
chunk-BFPLQINX.js
chunk-BU6NS6DM.js
chunk-BYU664DD.js
chunk-C3T65T2N.js
chunk-CM4IKBRQ.js
chunk-CN4KK4FJ.js
chunk-CYENH7PC.js
chunk-DKK3I2DA.js
chunk-DSOQVOCE.js
chunk-DX4FRJOS.js
chunk-DZUDN2ND.js
chunk-EET66OOP.js
chunk-EOII3ZM4.js
chunk-FPYN3Z4M.js
chunk-GMCPERTA.js
chunk-GPW3KCC2.js
chunk-GRSGWZPS.js
chunk-GVYJJ5O4.js
chunk-H3NGPCQH.js
chunk-HGMC4ZTF.js
chunk-HGNGDE7X.js
chunk-HK22TWMI.js
chunk-HRZ2Z22G.js
chunk-I2OEGV4C.js
chunk-I3YV6OQV.js
chunk-ICLDN2IS.js
chunk-IGADAGVB.js
chunk-IH3OE2JK.js
chunk-IOZJ6Q2V.js
chunk-IYC44SOP.js
chunk-J6O7R73X.js
chunk-JQE54VLJ.js
chunk-JWYBRU5R.js
chunk-K26PVPY3.js
chunk-K3AOJOH2.js
chunk-KIXI6D2H.js
chunk-LG5ZMMWW.js
chunk-LQIX22CV.js
chunk-MPSZ5JMT.js
chunk-MSN5IITQ.js
chunk-N4W5YQBP.js
chunk-NQ2RSCCD.js
chunk-ODEKWZDQ.js
chunk-OITW6XPJ.js
chunk-OJPBMZQC.js
chunk-OKVREMOS.js
chunk-ONUSXHBV.js
chunk-OZJQQPAL.js
chunk-P6DCLHYI.js
chunk-PPEL22JW.js
chunk-QJJPRU5N.js
chunk-QMCGJYNO.js
chunk-QQJPKFTO.js
chunk-QSO3IVFL.js
chunk-QTT3IVIB.js
chunk-QVLP4NN7.js
chunk-RKFCKAZO.js
chunk-S7OF43WY.js
chunk-SCMOXMAU.js
chunk-SSIIYEFC.js
chunk-STF3KHTR.js
chunk-T5DOU2YG.js
chunk-TLOSW2ZV.js
chunk-TSHWMJEM.js
chunk-TU6Q222R.js
chunk-U7OZEJ4F.js
chunk-UENZNYK7.js
chunk-UFK3ZRAC.js
chunk-UKVD2O36.js
chunk-UPPQC44E.js
chunk-UWWKYXHB.js
chunk-UYPQULFK.js
chunk-UYPVVWVK.js
chunk-UZDHZMVC.js
chunk-VSS47RTB.js
chunk-VSWSMAJO.js
chunk-VVXI3XCM.js
chunk-WFDRIDDN.js
chunk-WGZRCCGL.js
chunk-WJKNYX56.js
chunk-WJU46LN3.js
chunk-WRU6FTXV.js
chunk-X4DFV72N.js
chunk-XKN6W6QZ.js
chunk-XKSNUIWB.js
chunk-XT7SOZMI.js
chunk-XWV4WIWF.js
chunk-YEWLBR7H.js
chunk-YI73NHMJ.js
chunk-YKOUW7JH.js
chunk-YW5FUI3G.js
chunk-YXRXVVZ3.js
chunk-ZFZFCVAH.js
chunk-ZRGHR2IN.js
connect_hardware.html
contentScript.js
fonts.css
Inter-Black.woff
Inter-BlackItalic.woff
Inter-Bold.woff
Inter-BoldItalic.woff
Inter-Italic.woff
Inter-Medium.woff
Inter-MediumItalic.woff
Inter-Regular.woff
Inter-SemiBold.woff
Inter-SemiBoldItalic.woff
grey_logo.png
icon128.png
icon16.png
icon48.png
icon512.png
interstitial.webp
onboarding.webp
onboarding.svg
onboarding.svg
btc-address-types.png
multichain-disable-evm.webp
multichain-enable-evm.webp
multichain-swap.webp
multichain.webp
password-multi-chain.webp
pin-verification.webp
google-icon.webp
p_sol.webp
staking-graph.webp
juicebox-sdk_bg-HFON7OYX.js
juicebox-sdk_bg-LUYFYBUJ.wasm
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
translation.json
manifest.json
model-viewer-P5RAWAP4.js
notification.html
onboarding.html
phishing.html
popup.html
index.html
onboarding.html
popup.html
profiler-PLFDELWD.js
rive-AI73FSNU.wasm
social-wallet.html
startRecording-OJVBVWBM.js
translation.json
HubApps
000003.log
LOG
LOG
LOG.old
MANIFEST-000001
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
Network Persistent State
SCT Auditing Pending Reports
Sdch Dictionaries
Sdch Dictionaries
Sdch Dictionaries~RFe591bfa.TMP
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Secure Preferences
Secure Preferences
Secure Preferences
623cd082b6202da0_0
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index~RFe591dfe.TMP
4f2277ea2139c475_0
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index~RFe6236f9.TMP
1b4729d06acdb0b4_0
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index
the-real-index~RFe623b1f.TMP
04a139df562abfb6_0
04a139df562abfb6_1
09303e245f71e11d_0
09303e245f71e11d_1
095b46367ab49088_0
095b46367ab49088_1
12fd58f3a6ed44f7_0
12fd58f3a6ed44f7_1
205fcfbdb983cd3a_0
205fcfbdb983cd3a_1
260eaee2c073e48e_0
260eaee2c073e48e_1
27f27acfb30af1fd_0
27f27acfb30af1fd_1
29e59e735013892c_0
29e59e735013892c_1
3ef081b6e8f31128_0
3ef081b6e8f31128_1
46d7aea8bb4be4a1_0
46d7aea8bb4be4a1_1
478ae91ed41b145c_0
478ae91ed41b145c_1
5532370e78aaf6ac_0
5532370e78aaf6ac_1
5bbb35ca6a42157b_0
5bbb35ca6a42157b_1
5f3dac5e958a9b96_0
5f3dac5e958a9b96_1
66f80f89991ce3c0_0
66f80f89991ce3c0_1
73ef7f5da4fe40ea_0
73ef7f5da4fe40ea_1
7f89e53121a5de82_0
7f89e53121a5de82_1
80ff1193dfe38aea_0
80ff1193dfe38aea_1
8c353b6491c63b35_0
8c353b6491c63b35_1
8dac83546997f04d_0
8dac83546997f04d_1
93d093dcb79c851f_0
93d093dcb79c851f_1
9b80876d68396a75_0
9b80876d68396a75_1
9c4423d981d35afd_0
9c4423d981d35afd_1
a563e5cdadbea12c_0
a563e5cdadbea12c_1
b048e88379d5fd1b_0
b048e88379d5fd1b_1
b21b35002a8fca9c_0
b21b35002a8fca9c_1
b4ad4dd0f86d45e4_0
b4ad4dd0f86d45e4_1
c14ba9386034e03c_0
c14ba9386034e03c_1
c48a91fe735aa12a_0
c48a91fe735aa12a_1
c4bbff8cdb4dc327_0
c4bbff8cdb4dc327_1
d4e736ea71d79649_0
d4e736ea71d79649_1
d679fff785e18b55_0
d679fff785e18b55_1
d70a3c03007f008e_0
d70a3c03007f008e_1
d810dedc0908f7f1_0
d810dedc0908f7f1_1
de034fd73d1ff2b5_0
de034fd73d1ff2b5_1
df738f1c5797e201_0
df738f1c5797e201_1
e0e6825be37cc859_0
e0e6825be37cc859_1
e3ccb69e22ec5e42_0
e3ccb69e22ec5e42_1
e49f1fd345623b31_0
e49f1fd345623b31_1
e776776a94d96167_0
e776776a94d96167_1
f05d16d9d97086ee_0
f05d16d9d97086ee_1
f6315868bb1da0d9_0
f6315868bb1da0d9_1
the-real-index
the-real-index~RFe592c75.TMP
index.txt
index.txt
index.txt
index.txt
index.txt
index.txt
the-real-index
the-real-index~RFe628eae.TMP
index.txt
index.txt~RFe628edd.TMP
013888a1cda32b90_0
035aa9dff41235ca_0
08b99d499107ba17_0
0ae129c33e7a30bd_0
0b3d59c1b2221f76_0
0d3086d7cda635d4_0
14d9579db3cecf92_0
23469ac906fcc612_0
2687cdb408524ecb_0
297ecea5cebb5dfe_0
2a0afd649b00527b_0
2beb0213504d07fc_0
3ef2ebed6c12e1f6_0
45c2f2fcb9072b47_0
5ce2b92834133eaf_0
653e56b4b6556a9e_0
6c038e3570d6abf1_0
6f8ac775dbbd7415_0
6fc459ba53cb570a_0
7b4fd8111178d5b1_0
83efbe48d0097388_0
8a729281c4672a97_0
91baa182c7a11977_0
9aea9b2c55dd8602_0
ad0c92dfa52e69b6_0
afe1e5264eea33bc_0
b2efa64ecb36f8f1_0
b3bd0d67f800d222_0
b6c28cea6ed9dfc1_0
ba23d8ecda68de77_0
ba23d8ecda68de77_1
ce2a2172c04b134d_0
d0757ff92c7cde0a_0
d10f805e771d7acb_0
e0d37c7e54672663_0
f0de8c2de34c385b_0
f13a76bbf6c7f0b3_0
f3ab1e1292e135fa_0
f76ccbbbd72a0391_0
fa813c9ad67834ac_0
fb1f328d70d91607_0
the-real-index
the-real-index
the-real-index~RFe597788.TMP
sync_diagnostic.log
CURRENT
MANIFEST-000001
domain_actions.dll
data.txt
d45c389d-14a8-4bc8-8d67-e6789a352864.tmp
office_endpoints_list.json
Local State
Local State
Local State
Local State
Local State
Local State
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter~RFe58f018.TMP
safety_tips.pb
typosquatting_list.pb
Advertising
Analytics
CompatExceptions
Content
Cryptomining
Entities
Fingerprinting
LICENSE
Other
Social
TransparentAdvertisers
Advertising
Analytics
Content
Cryptomining
Entities
Fingerprinting
LICENSE
Other
Social
keys.json
typosquatting_list.pb
bfnaelmomeimhlpmgjnjophhpkkoljpa_12592.crx
bfnaelmomeimhlpmgjnjophhpkkoljpa_12592.crx:Zone.Identifier
well_known_domains.dll
nav_config.json
ranked_dicts
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
15fa9908-7832-4bf2-a83a-b17ab227ee15.tmp
20a85062-3eab-4756-8975-162c7be4a64a.tmp
2f8a4875-f5ab-4ee8-923a-7847652348f4.tmp
9e9c90f2-3bba-4c58-a963-800861dddc44.tmp
ff127b5f-7e8c-4169-839d-f88332784657.tmp
DevToolsPlugin.html
manifest.json
manifest.json
LICENSE.txt
2542b7f3-fa26-4e73-b939-7fad7bc750fa.tmp
BitcoinAddressTypes-57IERBGR.css
serviceWorker.js
phantom.js
content_new.js
default.dic
ccba5a5986c77e43.customDestinations-ms
manifest.json
manifest.json
manifest.json
manifest.json
manifest.json
LICENSE
manifest.json
manifest.json
manifest.json
Staging
manifest.json
manifest.json
manifest.json
manifest.json
manifest.json
manifest.json
manifest.json
manifest.json
manifest.json
manifest.json
memory/1424-559-0x0000020D06800000-0x0000020D0691E000-memory.dmp
memory/3996-6060-0x0000014866B40000-0x0000014866B60000-memory.dmp
memory/3996-6139-0x00000148688A0000-0x00000148689A0000-memory.dmp
memory/3996-6001-0x0000014732AC0000-0x0000014732BC0000-memory.dmp
memory/3996-6058-0x0000014754F20000-0x0000014754F40000-memory.dmp
memory/3996-6076-0x0000014867CC0000-0x0000014867DC0000-memory.dmp
memory/3996-6063-0x0000014866D60000-0x0000014866D80000-memory.dmp
memory/3996-5994-0x0000014732C80000-0x0000014732D80000-memory.dmp
memory/3996-6061-0x0000014766450000-0x0000014766470000-memory.dmp
memory/3996-6235-0x0000013F2E730000-0x0000013F2E84E000-memory.dmp
memory/5280-10998-0x0000000002CD0000-0x0000000002DEE000-memory.dmp
memory/5280-8446-0x0000000002CD0000-0x0000000002DEE000-memory.dmp
memory/5280-6234-0x0000000002CD0000-0x0000000002DEE000-memory.dmp
memory/6160-6236-0x000001ADB5760000-0x000001ADB587E000-memory.dmp
memory/6160-11000-0x000001ADB5760000-0x000001ADB587E000-memory.dmp
memory/6160-8459-0x000001ADB5760000-0x000001ADB587E000-memory.dmp