hxxps://github[.]com/NewEraCracker/LOIC/releases

Analysis

user interaction
yes
max time kernel
198s
max time network
199s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/07/2026, 18:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/NewEraCracker/LOIC/releases
Sample260708-wpd3nsd19j

Score

6^/10

discovery

Malware Config

Signatures

Looks up external IP address via web service 8 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
346	whatismyipaddress.com
2047	whatismyipaddress.com
2048	whatismyipaddress.com
2055	whatismyipaddress.com
3429	whatismyipaddress.com
3482	whatismyipaddress.com
343	whatismyipaddress.com
344	whatismyipaddress.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LOIC.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3568	msedge.exe
9500	msedge.exe

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msedge.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280075390001881"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{82141948-D6EE-4D31-877A-393F69C3173E}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 32 IoCs

pid	Process
6268	msedge.exe
6268	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3060	LOIC.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
3060	LOIC.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe
2396	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2396 wrote to memory of 5012	2396	msedge.exe	85
PID 2396 wrote to memory of 3568	2396	msedge.exe	86
PID 2396 wrote to memory of 2908	2396	msedge.exe	87
PID 2396 wrote to memory of 2908	2396	msedge.exe	87
PID 2396 wrote to memory of 2908	2396	msedge.exe	87
PID 2396 wrote to memory of 3024	2396	msedge.exe	88
PID 2396 wrote to memory of 3024	2396	msedge.exe	88
PID 2396 wrote to memory of 4984	2396	msedge.exe	89
PID 2396 wrote to memory of 4984	2396	msedge.exe	89
PID 2396 wrote to memory of 4984	2396	msedge.exe	89
PID 2396 wrote to memory of 4104	2396	msedge.exe	90
PID 2396 wrote to memory of 4104	2396	msedge.exe	90
PID 2396 wrote to memory of 4104	2396	msedge.exe	90
PID 2396 wrote to memory of 2304	2396	msedge.exe	91
PID 2396 wrote to memory of 2304	2396	msedge.exe	91
PID 2396 wrote to memory of 2304	2396	msedge.exe	91
PID 2396 wrote to memory of 1384	2396	msedge.exe	92
PID 2396 wrote to memory of 1384	2396	msedge.exe	92
PID 2396 wrote to memory of 1384	2396	msedge.exe	92
PID 2396 wrote to memory of 3880	2396	msedge.exe	97
PID 2396 wrote to memory of 3252	2396	msedge.exe	98
PID 2396 wrote to memory of 3880	2396	msedge.exe	97
PID 2396 wrote to memory of 3252	2396	msedge.exe	98
PID 2396 wrote to memory of 2080	2396	msedge.exe	100
PID 2396 wrote to memory of 3468	2396	msedge.exe	105
PID 2396 wrote to memory of 1764	2396	msedge.exe	106
PID 2396 wrote to memory of 3468	2396	msedge.exe	105
PID 2396 wrote to memory of 1764	2396	msedge.exe	106
PID 2396 wrote to memory of 1764	2396	msedge.exe	106
PID 2396 wrote to memory of 4012	2396	msedge.exe	107
PID 2396 wrote to memory of 4180	2396	msedge.exe	121
PID 2396 wrote to memory of 452	2396	msedge.exe	122
PID 2396 wrote to memory of 2728	2396	msedge.exe	123
PID 2396 wrote to memory of 2128	2396	msedge.exe	131
PID 2396 wrote to memory of 2128	2396	msedge.exe	131
PID 2396 wrote to memory of 5020	2396	msedge.exe	132
PID 2396 wrote to memory of 5020	2396	msedge.exe	132
PID 2396 wrote to memory of 5020	2396	msedge.exe	132
PID 2396 wrote to memory of 3468	2396	msedge.exe	133
PID 2396 wrote to memory of 3468	2396	msedge.exe	133
PID 2396 wrote to memory of 4308	2396	msedge.exe	134
PID 2396 wrote to memory of 4308	2396	msedge.exe	134
PID 2396 wrote to memory of 4308	2396	msedge.exe	134
PID 2396 wrote to memory of 516	2396	msedge.exe	135
PID 2396 wrote to memory of 516	2396	msedge.exe	135
PID 2396 wrote to memory of 516	2396	msedge.exe	135
PID 2396 wrote to memory of 3300	2396	msedge.exe	136
PID 2396 wrote to memory of 3300	2396	msedge.exe	136
PID 2396 wrote to memory of 3300	2396	msedge.exe	136
PID 2396 wrote to memory of 3424	2396	msedge.exe	137
PID 2396 wrote to memory of 3424	2396	msedge.exe	137
PID 2396 wrote to memory of 3424	2396	msedge.exe	137
PID 2396 wrote to memory of 4788	2396	msedge.exe	138
PID 2396 wrote to memory of 4788	2396	msedge.exe	138
PID 2396 wrote to memory of 4788	2396	msedge.exe	138
PID 2396 wrote to memory of 4288	2396	msedge.exe	140
PID 2396 wrote to memory of 4288	2396	msedge.exe	140
PID 2396 wrote to memory of 4288	2396	msedge.exe	140
PID 2396 wrote to memory of 4800	2396	msedge.exe	141
PID 2396 wrote to memory of 4800	2396	msedge.exe	141
PID 2396 wrote to memory of 4800	2396	msedge.exe	141
PID 2396 wrote to memory of 4896	2396	msedge.exe	142
PID 2396 wrote to memory of 4896	2396	msedge.exe	142
PID 2396 wrote to memory of 4896	2396	msedge.exe	142

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/NewEraCracker/LOIC/releases
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffcf500c188,0x7ffcf500c194,0x7ffcf500c1a0
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  PID:5012
- - C:\Windows\system32\WerFault.exe
    C:\Windows\system32\WerFault.exe -u -p 5012 -s 3320
    3⤵
    PID:9940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,11624879732697195245,9700267851982137404,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,2858056900850801533,3441200286260740958,262144 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2604,i,6072735074462491321,13579526022294461886,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,6394343583289936918,6173824236760472221,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,18208673097326274833,6496420551150671729,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,6443850959764061395,6748953783125543721,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,14436827476769397505,949471738147992670,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,1734177207740221031,8244703295453345697,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,10287330498540271037,12141197699322453950,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,7042057850676979798,16602761060643103269,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,7042057850676979798,16602761060643103269,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,14464563158050700533,11671822681977497328,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6240,i,15280177958775728824,11674561701739236663,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6756,i,15485909250947358422,4524353946146976529,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,13610226633250886866,9278787670855592875,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,17446587354435967543,14405412023206059237,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5956,i,14831032889211231903,3972060771698425838,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,15169364841493553823,14879530333589550768,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:8
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4392,i,14185664924207763297,2443985534887061102,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,4772603815908742921,9272030412339233104,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4336,i,16502285694414704614,14764608869807551315,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5160,i,11112595701128016787,4538801899948466511,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=776,i,3333957866432498370,8306391886208811137,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4460,i,15229891447843154906,8027164820540642487,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6384,i,3433972191617392717,18250960718102026519,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7080,i,5320710928941917260,13085445968033260471,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7208,i,3790721571478940952,16545805637848958685,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=7240 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7200,i,4671839257580205222,68088849224157178,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=7364 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7856,i,16719353742208680969,916924846679257334,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=7872 /prefetch:1
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7024,i,9007287961941866758,3276094864850432829,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=7080 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8088,i,4350876117272427797,3252970324570772374,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=7916 /prefetch:1
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7912,i,15628315965549667963,12724046024153663786,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8172,i,15220724857491513687,4564572789686254593,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=8152 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8352,i,5962226228027779555,4038477853080965133,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=8364 /prefetch:1
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8432,i,11299619943781547516,7957496787711504651,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=8420 /prefetch:1
  2⤵
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8572,i,10153502256834072655,7112156203505610255,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=8576 /prefetch:1
  2⤵
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8740,i,5161784529069802443,6275764920501304570,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=8592 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8860,i,14137637737333619433,7654706701340685336,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=8888 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9028,i,4841793880498996530,12518155928149745004,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9036 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9272,i,8992458018865501556,4691297214517802994,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9252 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9412,i,10696467673504135173,5199295759214337867,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9464 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9592,i,14691437532076504139,16688735762780142760,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9432 /prefetch:1
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9700,i,9498012684296832806,5732017548186789187,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9704 /prefetch:1
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9764,i,14032699372315525353,5708368450219515088,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9784 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9984,i,6488254800197794259,3747903075629553247,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9992 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10148,i,8863727558717854687,17176350605687826304,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9996 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=10276,i,11835744034798234277,17908348227936578443,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=10280 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=10416,i,8219891314678313557,10505198499542070081,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=10428 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=10548,i,13589330361883058099,4595077595717871500,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=10556 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=10732,i,5929757299527826400,13550208140492614613,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=10740 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=10856,i,984384990176145355,13330347934101554962,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=10868 /prefetch:1
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11000,i,4387732054466422277,6475332657585497033,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=11012 /prefetch:1
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=11172,i,3957313427123685045,11828244329029796578,262144 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=11060 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9180,i,8531731164717326345,13503814625273748818,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=11500 /prefetch:1
  2⤵
  PID:6448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8932,i,7031127094050603022,17604079579492401486,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=11464 /prefetch:1
  2⤵
  PID:6456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=11732,i,11493950637757342834,747960283587770715,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=11748 /prefetch:1
  2⤵
  PID:6464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=11876,i,18142130631716839813,8262204655884723013,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=11892 /prefetch:1
  2⤵
  PID:6472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=12020,i,16949694714579205104,15525635127787150727,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12036 /prefetch:1
  2⤵
  PID:6480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=12164,i,15914926861717123887,15551023130664053325,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12180 /prefetch:1
  2⤵
  PID:6488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=12312,i,15235258023515792231,16971433109177393144,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12328 /prefetch:1
  2⤵
  PID:6496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=12456,i,742601986945825274,613314937862919471,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12472 /prefetch:1
  2⤵
  PID:6504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=12600,i,2644533056288260759,3231294558988860243,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12616 /prefetch:1
  2⤵
  PID:6512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=12760,i,8142215317011791703,17497971830911756372,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12660 /prefetch:1
  2⤵
  PID:6520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=12888,i,6952502047797762986,4252541498466094843,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12904 /prefetch:1
  2⤵
  PID:6528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=13048,i,13495345251572441159,4742081576639730999,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12884 /prefetch:1
  2⤵
  PID:6536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=13176,i,24253650056714788,5580135743898130479,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13192 /prefetch:1
  2⤵
  PID:6544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=13324,i,9725041492775960469,1657775180403093489,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13336 /prefetch:1
  2⤵
  PID:6552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=13464,i,13609789966377971859,776626401366817761,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13472 /prefetch:1
  2⤵
  PID:6560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=13528,i,13859396962401402656,11602304695388493194,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13640 /prefetch:1
  2⤵
  PID:6568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=13548,i,7839724634899647179,6248500989349462087,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13516 /prefetch:1
  2⤵
  PID:6576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=13696,i,11812458573804767399,12237055383125563924,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13720 /prefetch:1
  2⤵
  PID:6584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=13776,i,11627732954266079809,5045161052171432087,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13972 /prefetch:1
  2⤵
  PID:6592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=13880,i,12259631739765429685,9706591176672349730,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=14072 /prefetch:1
  2⤵
  PID:6600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=14092,i,4046252019427085813,2970256380914206803,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=14100 /prefetch:1
  2⤵
  PID:6608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=14124,i,1735494574501376572,6404059954890055361,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=14164 /prefetch:1
  2⤵
  PID:6616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=14308,i,11634888355312221509,13181084248291462206,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=14504 /prefetch:1
  2⤵
  PID:6624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=14644,i,2764945449208977049,6552352264034310476,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=14724 /prefetch:1
  2⤵
  PID:6632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=14912,i,10929178779536666864,4533551375333683388,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=14928 /prefetch:1
  2⤵
  PID:6644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=13764,i,15294988970445106189,2218240258098090316,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=15232 /prefetch:1
  2⤵
  PID:7956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=15520,i,4470325124393858988,18339967899218525716,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13536 /prefetch:1
  2⤵
  PID:8120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=13528,i,5683896426223401628,17972292956516272905,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13736 /prefetch:8
  2⤵
  PID:8028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=15500,i,4693494800852623414,9654801037424130762,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=14172 /prefetch:1
  2⤵
  PID:8092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=14888,i,16677674239579223941,15379605363039539798,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=15316 /prefetch:1
  2⤵
  PID:8180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=14952,i,11187323649621370308,14968713059884781772,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=15884 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=12624,i,15741363170563891740,10511999974497743588,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=15960 /prefetch:1
  2⤵
  PID:8188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=15976,i,851989883968366274,1887791710205640483,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12444 /prefetch:1
  2⤵
  PID:6656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=16172,i,4967517534960528814,15508014102047399235,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16180 /prefetch:1
  2⤵
  PID:7872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=12516,i,17305923736725385204,16208129974734533636,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16320 /prefetch:1
  2⤵
  PID:7880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=16448,i,2621371777162431299,16878257590040779248,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16460 /prefetch:1
  2⤵
  PID:7888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=16596,i,1660052920443697190,8072371073570290156,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16604 /prefetch:1
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=16736,i,10752786605886940569,15056343000644725240,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16756 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=16908,i,2298973556331469437,3239349111101837737,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16784 /prefetch:1
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=16792,i,11472132748637404751,2836353913846066650,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16912 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=17072,i,3963131293812890372,7284373430004805197,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17168 /prefetch:1
  2⤵
  PID:7948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=17288,i,7407232227192332815,14794061198020878015,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17300 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=15432,i,7581033596211372433,7838344073088062245,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17516 /prefetch:1
  2⤵
  PID:8208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=17696,i,15489685877585859175,6550374855053541548,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17704 /prefetch:1
  2⤵
  PID:8620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=4484,i,13973571502030487991,11967853499783580821,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:9052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=18248,i,2568359774840179468,16958677918917342448,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18252 /prefetch:1
  2⤵
  PID:9104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=18296,i,13261932303609864239,15326080999341447596,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18372 /prefetch:1
  2⤵
  PID:9112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=18516,i,13297899024491903190,4898399746809434424,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18528 /prefetch:1
  2⤵
  PID:9120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=18748,i,8916230075337280490,7752882562106447184,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18732 /prefetch:1
  2⤵
  PID:9264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=18724,i,6605835526858729401,3849148080076058225,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18240 /prefetch:1
  2⤵
  PID:9460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=18692,i,12825858681597576194,16018855222404305203,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18416 /prefetch:1
  2⤵
  PID:9468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=19056,i,596428750367365623,11709247186397544524,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19064 /prefetch:1
  2⤵
  PID:9476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=19204,i,16132588486761980812,4018648270574302913,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19220 /prefetch:1
  2⤵
  PID:9488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=19360,i,4889054766788276324,2823120911081511275,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19364 /prefetch:1
  2⤵
  PID:9496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=19516,i,6766438168519145697,17826639984383413872,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19524 /prefetch:1
  2⤵
  PID:9504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=19548,i,2920926362380352973,12196147738488374892,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19192 /prefetch:1
  2⤵
  PID:9516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=19660,i,4956234968607276533,12355968756864698083,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19792 /prefetch:1
  2⤵
  PID:9524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19964 /prefetch:1
  2⤵
  PID:9556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=19408,i,14264141874771547615,7970064326883759193,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19640 /prefetch:1
  2⤵
  PID:9568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=19828,i,11317374665263223881,17523606990091869844,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19972 /prefetch:1
  2⤵
  PID:9576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19056 /prefetch:1
  2⤵
  PID:9612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=18744,i,16766930297112251270,9351684476465812703,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18688 /prefetch:1
  2⤵
  PID:9636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=10724,i,1897869233688904385,6614912055271211408,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19812 /prefetch:1
  2⤵
  PID:9644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=19552,i,17136207808419319992,635714694940406124,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19600 /prefetch:1
  2⤵
  PID:9652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=18768,i,10048757274927631873,14331753645900886585,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18848 /prefetch:1
  2⤵
  PID:9660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=18824,i,5890661911354720010,9625009409997397145,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18796 /prefetch:1
  2⤵
  PID:9668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=19724,i,15058678912168864606,734799982884851000,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19712 /prefetch:1
  2⤵
  PID:9676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=19060,i,10333244292074534793,12875876958833601557,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19064 /prefetch:1
  2⤵
  PID:9684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=19020 /prefetch:1
  2⤵
  PID:9692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17924,i,17038333989858730640,11554499197054498714,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17872 /prefetch:3
  2⤵
  - System Time Discovery
  PID:9500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=16000,i,1533029221413356706,12208015533805857720,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16532 /prefetch:1
  2⤵
  PID:9896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=16048,i,16816232145290111339,2074984399262141629,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16020 /prefetch:1
  2⤵
  PID:9912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=16072,i,1444897302629736364,17685614756743978898,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16036 /prefetch:1
  2⤵
  PID:9916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=2156,i,12534699593378244973,16443779088864146075,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=15088 /prefetch:1
  2⤵
  PID:10044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=16164,i,5521515955369753913,5463869393090086729,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16176 /prefetch:1
  2⤵
  PID:10080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=16168,i,5151614372294942436,10201645254682456936,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18200 /prefetch:1
  2⤵
  PID:10072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=18460,i,5885747324911779368,10170955954456180877,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=15972 /prefetch:1
  2⤵
  PID:6596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=18468,i,4876600881311835451,14367315322571763157,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17764 /prefetch:1
  2⤵
  PID:7456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=17084,i,17061666001136477842,13641497583881409350,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16052 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=18480,i,3306255879804875487,9418087010212558123,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=15088 /prefetch:1
  2⤵
  PID:7476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=15836,i,14316057835205027790,1772037175515909715,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=15824 /prefetch:1
  2⤵
  PID:6252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=10884,i,12095633287988083907,18293841729728679313,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=10876 /prefetch:1
  2⤵
  PID:7996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=10412,i,15197780739246617870,9023956497259933519,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17616 /prefetch:1
  2⤵
  PID:6612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=9560,i,16940731973761514754,17104166435113859876,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=11444 /prefetch:1
  2⤵
  PID:7544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --always-read-main-dll --metrics-shmem-handle=19072,i,2189871654692784002,14899131397816571422,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9600 /prefetch:1
  2⤵
  PID:7104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=10120,i,13314001964872059482,16318221945753774983,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16328 /prefetch:1
  2⤵
  PID:7160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=9708,i,10252217342977153333,13666222058970225890,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18660 /prefetch:1
  2⤵
  PID:7164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=8332,i,1630276359734286825,14885658240127680357,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9756 /prefetch:1
  2⤵
  PID:7116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --metrics-shmem-handle=9724,i,4167818313542102416,936111970042651354,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=11864 /prefetch:1
  2⤵
  PID:7940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --always-read-main-dll --metrics-shmem-handle=16812,i,18077786437935990414,12958271501437940697,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=11644 /prefetch:1
  2⤵
  PID:6496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --always-read-main-dll --metrics-shmem-handle=18496,i,1409804357809527548,9721973231282144244,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17860 /prefetch:1
  2⤵
  PID:6816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --always-read-main-dll --metrics-shmem-handle=12784,i,15181045055067238567,10205985723719872823,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17236 /prefetch:1
  2⤵
  PID:9240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --always-read-main-dll --metrics-shmem-handle=17732,i,12616579991642242209,11610671092856666098,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13468 /prefetch:1
  2⤵
  PID:9160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --always-read-main-dll --metrics-shmem-handle=13840,i,4811152712830493495,16374308994758973389,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17180 /prefetch:1
  2⤵
  PID:9152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --always-read-main-dll --metrics-shmem-handle=15416,i,6942552622899274076,1945516617500773591,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17248 /prefetch:1
  2⤵
  PID:8472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --always-read-main-dll --metrics-shmem-handle=12420,i,16793429362681570655,12639873357553619912,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12384 /prefetch:1
  2⤵
  PID:9188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --always-read-main-dll --metrics-shmem-handle=3572,i,4749734243963784584,12854964714967040381,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12424 /prefetch:1
  2⤵
  PID:8524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --always-read-main-dll --metrics-shmem-handle=14088,i,11201761873276592609,3095828708146060787,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=14384 /prefetch:1
  2⤵
  PID:8504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --always-read-main-dll --metrics-shmem-handle=11436,i,7476811684560541150,15122201659491827350,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=12868 /prefetch:1
  2⤵
  PID:7748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --always-read-main-dll --metrics-shmem-handle=12804,i,7181915804897916804,12607357311850460532,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=14544 /prefetch:1
  2⤵
  PID:6780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --always-read-main-dll --metrics-shmem-handle=16452,i,17491771812925107441,1076535483543008049,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9300 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --always-read-main-dll --metrics-shmem-handle=12868,i,8786980879803668070,9371704323966324605,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17180 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=7320,i,6321449372838350700,16378433640691445091,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=7308 /prefetch:1
  2⤵
  PID:6680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=11308,i,17107959873861750789,3088015721109851049,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9208 /prefetch:8
  2⤵
  PID:6456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=15484,i,6587622144594012667,9719642250144613168,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9160 /prefetch:8
  2⤵
  PID:6952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10500,i,6776543591144337465,1688288141169316103,524288 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=10504 /prefetch:8
  2⤵
  PID:6788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --always-read-main-dll --metrics-shmem-handle=18652,i,17267255079269896185,8424913960394514480,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=10884 /prefetch:1
  2⤵
  PID:10208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --always-read-main-dll --metrics-shmem-handle=17760,i,17131078345971724648,15072525170033380299,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13656 /prefetch:1
  2⤵
  PID:10216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --always-read-main-dll --metrics-shmem-handle=17524,i,5727629332512921397,3877168751923899474,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=16900 /prefetch:1
  2⤵
  PID:10220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --always-read-main-dll --metrics-shmem-handle=16288,i,16182648603727241195,12349008058859435985,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17124 /prefetch:1
  2⤵
  PID:7444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --always-read-main-dll --metrics-shmem-handle=4384,i,7497403832767863964,5204808004818411563,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=7952 /prefetch:1
  2⤵
  PID:7464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --always-read-main-dll --metrics-shmem-handle=6956,i,7964743957840088673,8703135501206051282,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=15316 /prefetch:1
  2⤵
  PID:10232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --always-read-main-dll --metrics-shmem-handle=11452,i,11841231394820511947,8505251645662507581,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=15880 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --always-read-main-dll --metrics-shmem-handle=15988,i,17435939290080087890,2498598463167605066,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=13176 /prefetch:1
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --always-read-main-dll --metrics-shmem-handle=3824,i,6103960888806656512,7997111765050912019,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=11440 /prefetch:1
  2⤵
  PID:8680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --always-read-main-dll --metrics-shmem-handle=17036,i,3972755114744885976,15676038553610292590,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=8584 /prefetch:1
  2⤵
  PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --always-read-main-dll --metrics-shmem-handle=16932,i,8240136747192877172,14983112721370703640,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=18516 /prefetch:1
  2⤵
  PID:7200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=177 --always-read-main-dll --metrics-shmem-handle=16980,i,13656774370669907664,9661683113271878968,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=17040 /prefetch:1
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=178 --always-read-main-dll --metrics-shmem-handle=17484,i,3282932561388643433,7067296002480945104,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9516 /prefetch:1
  2⤵
  PID:6328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=180 --always-read-main-dll --metrics-shmem-handle=11292,i,6915549079085306309,3708434827660573346,2097152 --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9500 /prefetch:1
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=182 --always-read-main-dll --field-trial-handle=2092,i,2428628791196118563,12884075706545237387,262144 --variations-seed-version --mojo-platform-channel-handle=9496 /prefetch:1
  2⤵
  PID:5280

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4500

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1772

C:\Users\Admin\Downloads\LOIC_2.9.9.99\LOIC.exe
"C:\Users\Admin\Downloads\LOIC_2.9.9.99\LOIC.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
PID:3060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

55f1530a-bab3-4a80-9ed9-a2913c36f622.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\55f1530a-bab3-4a80-9ed9-a2913c36f622.tmp
Size 27KB
SHA256 d02a999e755eee8b4ce1367132e0d6d59cf5d8c13b59d06b063e7eaa991e969d
MD5 779cfcebc88c70ca73e77f64051dd660
SHA1 278133c037574478de8867a7ffebba842f86b20d
SHA512 04564ab04f86d798550cf4737c4d195c312107470f5af0233831b6806fb17eb7854f454055cfea284ac60848be67f183f51e5e0d64b3756f4445f14a281a4175
SSDEEP 384:yiFQtNn/s3n9SHgsNo8TUNTUlIlLEB+4gwbbsIIdEaACEJrZWScjmwDM:5FQj+9XVwgGf/s1yhZW1jnM
TLSH
T15FC22BF348D7897AD99D5747E77E2E128EBCC163B6806A40B7985A0CCCC66BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 1aab74450daf5b1c65016c1414e8d40db9717f6076d01e5c06fe7d2b6c0d09d0
MD5 71deee759e924f9fc2e0ab674c2096c9
SHA1 0e622a00f1df0e81179e3da661b811030c2b67ab
SHA512 0e9480c55b200fc739136ab0b3b39bc4c2c00c94cfdac6385fd6bb13aac35729fc49f919e487a874383117e5444528816e570aa8fa9f64c7d6546f3fd641b695
TLSH
T118E026841AEAC66EA701645F827C570CD2C13B1B93CEA94A2F0884887002880FBC37E4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000a4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
Size 201KB
SHA256 98ee120b0a3710d50afbbf4d0ce49d2399343d00139c11633ffb79ad1986919c
MD5 b9e5cc5f3b2b87f8708ee916a3c05782
SHA1 1a192568525b3f7faca9ac10816d44b2f70e8e15
SHA512 cce40953814e8f598df1044847f01dbdda084064a894eda5b7d225fad9608e59b0b4042198e5b98a2ab8f05d379d02478f05940787637241839b98f01d260d8b
SSDEEP 6144:fkm6HHT9kKywL0jcZ93/PgqVUuptMzOGvyjkW:Mm6HHTaKywL51/PDPpt2yjkW
TLSH
T16B14227A1F7B71E3C8ECA0BE8E29408119DE65E213B0715E91503CE6EDC6A5EF0467C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
Size 32KB
SHA256 eff9dfe4ebe815c15fa6087a8b712ccacea7a59dddcb55a5c819293252d73c32
MD5 cba69340542e691fa9e4b30334a07507
SHA1 4af443e83868d3a18fc9ad853e58eaf39bb065f7
SHA512 4f8d78c0ae8e04e27dfbcef602d3d46cdefd8f01085cc549edd35805d775065c4f78b75da617adf5f8f699a9edf7fa69db7c267917e5f9cb967e59563f905227
SSDEEP 768:wOsAPzChBrMSp8DxHnpmf3ILP1KpbjtXPgYVkutZ:lsArKDqtO8KZtXPgYXtZ
TLSH
T17AE202DF0C15679A01C371AE6A7C6024EBB3E07B3035CA1B1E764CD250B6660E5DB8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 96KB
SHA256 6c501148aada1207002c4dc6fb8794554897d71abeb97e92d9d15c8cf61a8448
MD5 76c1b9685c996f14f4cc8b585ddfb467
SHA1 e774b883f6b5736a9f0f0f05cfed247fdd8bdf6d
SHA512 d67c98951d327ea38ba3e761a229436782094e823847d989ddda919aa4de613bc7c5bb057968856414ecf2f2fe82e823bf3a04691d62ad7b67f7b6c142a807d1
SSDEEP 3072:rYsgcoaeqVBTILAbL7ABGMeTDm0ZSfKaXH:raU6qL7ABGMMmEFkH
TLSH
T1F7A3127B369F8CD14907CC51321A335688F4D0ADE2BA066B3D102E6A3B0B75F7A86F15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
Size 67KB
SHA256 d5ac7a12ae8960d350ad79b67e301e45fc2d0cdbd61c4709519c092fc0750ad6
MD5 c1f3b6e1692182457b3ceecaaafe3369
SHA1 83fdb62f4207d96b717b32dee9fd36fc33d9a1a1
SHA512 ee77498106d3ca6f4b7895aac162a073d5289f7f8f8e37d623f36768c44cc6b5df9b6bf5d63f8923a542c632497d28709f847c319d23dacddfa5918a47ea58f9
SSDEEP 1536:WmOUu9XDslT1XDr/EZFn89ZSVA3f1RDbWNdfCl9fMh5P77:t0B01X6F8LSVifjvWNIGff
TLSH
T13263025DC0A939CEF9F7F959B0A8051E9097AFC2CB8E813D80B464996CF8634CDB0578
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
Size 401KB
SHA256 636f6f90e2d4db116adf581b76afcfb692a9995c12859014f043e1c50eaef0f0
MD5 7955637fea4686d45be714f3f2a8f086
SHA1 1dcc334fe6222ed73fcb01476a75705bbe2f0a52
SHA512 d15cca41f387dd5d741528ecdda7758ec8d1e04c88efb47b551542ad1bc1bccd024f0a83ed3a1357e56e18df29e85569b9bd5a03522f191439414f1e474ffa7a
SSDEEP 6144:2bEuBG2UCAdCAo1RkfxsFjejLoYFqRFp0nLDkfkV968gAiAm4Ly2Y1VGKxO:23Y2RmCAxjAj0nHzRn0sKxO
TLSH
T1859423E76F42BFEF36D2028A2E16640D24C675139F893109F6B2D36DF896D45DE22C18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ab

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
Size 162KB
SHA256 58a0b411308548770d01fa1749e995620561a1e6d6da8a70e52cfe714dc37958
MD5 40980d630893eb26b98fd58e4ae5b947
SHA1 d55f686b4e20215c5fb0755dab21352249ebfd3b
SHA512 079a411d948b0c442a4625ad75226f51bca404467b18805af9e027e887e6e9a6975fbaf542602aaf1780c560f246bc875c4d7ced7c3ea9467f7807c9a57e0698
SSDEEP 3072:0Q4u1wUMQE6pRlou6Thfws4bptRf7uXetigx2VDBGUy9Q4:0h8wUMQE6pEu4hfwtZ7uuAS2Vt/yW4
TLSH
T108F312C5D4DFA4D26B019AA2A24FDC76924F7B57C4EC06499ACDC378D3193E4E26328C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ac

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
Size 27KB
SHA256 4055c08923c81d63735c1691baa778c332bf680b8c4eb057d7b87e2c00c5578d
MD5 aa6a30350189be311d6f87b7d145d85b
SHA1 79d0105a90db8fe73876d31dc4f54bb9a194002a
SHA512 3563cdd2399d4ffe7f76a2b252800e2b767f7fc776fe1faf1bd385cc41ff9305c7a5367a2d28d6bcb46b9202461c23b86ad6f1f3cec2cf51ffbd181000651037
SSDEEP 768:Y+8X/NT0ZezFy6uLGsyvi7ssXAS39YGiE1TJnhC:Y/ZexL0o5X2k1Tds
TLSH
T1ACD2F104AD3D7AA06468E3D332713166FDA696A10B7702D2C615E625B3983F42BCBCE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ad

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
Size 78KB
SHA256 ee2a22f9e9057255437efccd4ff5309818dda493babad5eb94360101bea8780c
MD5 a8ded8a2e61a9f9daed8f1b0c3bab0e3
SHA1 ffe10247c970b31b6e4146d00984874022a1f6aa
SHA512 1a05b8418ab157e10b56d4f0d1cd889cccc2ee5dd1e94a084a5d0b7d416209a320725b04ac43f420e0532ce047ee1712713cf3ae1933cccefb1725fc27d8dac1
SSDEEP 1536:t80ozk0+xbQD73NrwQVudYfLh/3eVsKtBgGSmka+k4Duri40yT8rLgnmxIRhl:tYzPXCufL9GsKjgGSc74auk8rghl
TLSH
T161731260946BA1C95F7E9905EB4053FFA51B92E3284DD4B5B48D2240B24D8FE7BF0C6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ae

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
Size 512KB
SHA256 c207f2528ce4320eef9cab5107f01152076a10af5ca27058a137337a25d04f3d
MD5 d7eac82a205755cb9a63b0b0f99a736e
SHA1 0833a69a06587022692d10d60afe0a72ca239c01
SHA512 0f356bd1cdd382cfcde9b5d8f19484614c29f5d5b385f61c413b49f84a7ebd3edf4760b0d9da40f00c7da638d8de359a630270677f017b885dff1602b89adf52
SSDEEP 6144:PHzUSyU8Z8dZ15UUBLHj+4fy55j4qWafLgTxpfSMI727Ztju+Xg3GY83sdm:fzUSy2CUBj+4a55lHLgTxpkkjTXg3T
TLSH
T1A9B41272FAD7E782E753DB78E11EAE6B097C19CD25D0481DC1012E4875A92B0FA072DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000af

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
Size 512KB
SHA256 02b0a8ad7f3e9727b28cebc2ee1663712b990da7cc10dd96025420be6315dc94
MD5 9c4994ee71ed65500105b3f15520946a
SHA1 d2b907a0d4e91781e6a84acc400658e2244d9c12
SHA512 6e23ab30afb45947f85feaeae82cdb3603b250f0175a346820ea9a125bffbd3d57d5140a92b8c0af36e6cb60aca2f51fedbaf0796a6834cff95b953658bf71fc
SSDEEP 6144:LOudzRoFS0/wxHqywh0aNqbi3oCKImWcbL5MSRSMzc1DN1cGexAlfE:3dzRiwC2at3OIYbzRSWc5N1cGexwfE
TLSH
T136B4E0B0FBC3DB80C74326BDA0BD3E371B1204C161D94A0789537D519461FA6AB2BA7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
Size 512KB
SHA256 3524d8883e4d5781b6215c05f97d1232b442cd41f66cc59723de6c5e19399ba3
MD5 a0355e6554046083e262e04dd1ee6199
SHA1 73f053d90ec3e9ddf235f2f79902350096be795f
SHA512 3e794941897c103033e709913af6e7057295c2e9f4587f19d1a13bcc867c86f6816d168245660195ea96ac17c833696abad4a4f034aa9dc2a45033ca09d52a11
SSDEEP 6144:aVIHGR+Y4LbXL9wD4GR9R9YsRUhovbfxGyTmSfKcKApMqdjdLi9NrMCrx4F:JU+YI9wD4GVwdVALzu9NQCo
TLSH
T1B2B423E9E1268529D30484B1BD769D0939BA3B681DEF3D4B04009A62FBEF1D0761EFD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
Size 19KB
SHA256 b9e910102d058a696ccfcc1af565d3844c952c7e2127915ee2953f66839a9555
MD5 9f98b25682d26512e43c53b3ab379849
SHA1 241687b6aba85f978728113da6a9831378bd6320
SHA512 9cdd2d1b0d782879d8e089292d6b7e44efc176ae733e0cd223a1815636eb7776afdfef1d46a63121a1cddf261aa1af5741138e5026d8abaa1586f32507068e80
SSDEEP 384:720rn9jqnI9cpR2kDPi+Ck9Zl+jog912SHX6Xr6V3FFBH/nRLQ5wDhxCmH4I1:nrclta+Ck9DoogP36XmZXBZPDbBH4Y
TLSH
T16892C0A09992C88ECD36F4271E5EE9C3595CE4917E3A0BBB07D26D5B084164A7CB21CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
Size 256KB
SHA256 7cf6db9eed43b81665629edbed64b5a629e86cfaa0bb7bc644721687c5017311
MD5 f00ffa59a6f24a79d0a38984f1d1c667
SHA1 9c3ea96bb40c2ddce7d7033914eef469aa562c4e
SHA512 b00e01b45fdba4e8c350c7f27080f5f7bc3d66ca31b8acf702719afd529db4a153451dfe3957d1d72aafae48e4c0bcb16896abc66adc347414197c6386da17cf
SSDEEP 3072:RPm8oBF0z5yYNKxpATjY0DxYK3k+zkF2WNlkE:RPm8oBF0zMmTjY0tYMkWkFT/
TLSH
T19044D0B4F682D782CF432EB8A06C1D335B6614C432C99E0F47B29D21A5486AAD71F75F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
Size 59KB
SHA256 2a43b4cfc47238c170257b2345f451828a25270327bba55db5db07398e1199e8
MD5 3df2a75a9ddc950ce672b11962b8d017
SHA1 aea2d21e8d4076f6abc88225e5182c0f5c6a83e2
SHA512 627c2c8d6a6709f714e16e9094e1e8b33ef228195f220b5be738ef09805897785ac1e02c3f48dbfaa66fea1524a1be3ce6a36f94172c82439e72cbc1c83866af
SSDEEP 1536:yG7MtNK2UY9XlJdEISDLz+9BxP8xTGxMYAWwd05TIbGTdNDVsFy:yGCNKjY9VJdWLzHxsMp4IbeVqy
TLSH
T1605312B8D9571FAE9722CE3C6B4A0168B7714A9A52DDF04D12D8080BFD816D25E2A4FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 17KB
SHA256 57c6927d73a5e2b55201b4e9270037b13c02d87a358342f63ce43daef96ad057
MD5 24b6957e1169e8137845276c684ab390
SHA1 a16a33ebafe82219248d2d48b4942733419ae26e
SHA512 bc261a84652a9ca80c5e574b25cd2eef8e009f8980f95f06c1b9fffd52bba9598dd5cd585cd95cbc19c186f688a16ec0645ca5e4002e500ec063044b01ec6a21
SSDEEP 384:0BwD25Q/tAFF2U1bc8cqqUzJahurvQd2MeXaZUXM:JIV4VqqIQuRlid
TLSH
T1B882D00523DBFC4E90D9F6B832E921B1BFA81F1F90711D1BD8582497A53CD0B3A3464A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
Size 17KB
SHA256 fe672d5c4e9570c5c4c30f7ffa25027237ec3a8766ec89d377a0f8964ee75937
MD5 7b25ade41ba17550d716530d18040b36
SHA1 d4d120778bc8ec1848baad09c6cfda312e02b155
SHA512 0785d61dc17879db03511c9977ebfed986072398665166edcda0ece0ffd0bdae44592d4a91064be3da462c571e13fab722aa5d9516c41d215b9a381faaef0e5f
SSDEEP 384:/nmVvU04jy2mdP6WxXByiQy1lm3W0KlGou/W2B9wv5iMOtLbnO2b:fAvX4jy2SP6WxxjhmuGoeW2B9wv6bnOG
TLSH
T1E882D1539CB2628EEFD09404FCB02B6E6B45CDAB700177ABB7D1426811C6187F2796B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 62KB
SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
MD5 c813a1b87f1651d642cdcad5fca7a7d8
SHA1 0e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA512 af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b
SSDEEP 1536:Q9pfnSa+E9Az52gNbkYtUtqvUhZRHuLdrx07LXz:uhnSpE9A1EY6tBPix07Lj
TLSH
T1695301D4670EE2A579F2CF23BF59C5C00803162D8E11AA68FFA063878D8430BA793D1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
Size 68KB
SHA256 90e39936fa4a20f0fcdafc8ce17bd53e662b5ac7fe4c810b28ed5356b9da6d02
MD5 8b512e3b59cb89f3f306e9e69f799ab1
SHA1 e0a1c29cf12aa60249c80da1600a2d7778984788
SHA512 d5b39e2618e5cfcde62a34552aa24def071b21cea9913296d33edafc7fb024426ebc8e92550b40f0bb3231c8ddb2945538a7e6c0d4f308c7cdac7d5e53745b87
SSDEEP 1536:phILhlQU1HUf76Z+AGYguWv0KxwhT30N7Xw1RJiuwPy+R3zP5:p6Lhl/1HX9GjuW8KxwhYRXw1z+55
TLSH
T1FC6302008F370176B188A8D9FD49E3B6CAAF58E0914BF595020B188F7F5F8D1A55D2BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
Size 19KB
SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
MD5 1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5
SHA1 6dd8803e59949c985d6a9df2f26c833041a5178c
SHA512 b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863
SSDEEP 384:/Und3PKicut4yiFkC9RWzlJpa2/CKYOyDJmCZyXJTW4PO821GyLjSoBwNeS:0UizQDYlJpaQCKYOyDJpI5Kx821DS3Nz
TLSH
T13692E1670BCE314E422EE25FA316A51733E41BE1EFE49640D6AA70D81C38DA243179D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
Size 29KB
SHA256 2f2d5cfcfa90562924e3f961032f165955c49e5ac5ead08755b0f060f54bc213
MD5 fc6c71ed3f33077375aabc5e114fa9e2
SHA1 ef648a72739836c8efeb2b4011e235a051b7ed18
SHA512 63d85c4e715c58c0b5f4f640728a76356134ea264e1a1bb0f23faa3a7088148aab8e47aaf1cb3192373f2218c71a619eb1d0fa45d8cca4aaf58d8a50f9c8967d
SSDEEP 768:vEBNwMyBpc/rz9qvNmaCJcWxBCYD9nQw9q:aPyQdqwK+nT9q
TLSH
T198D2F204CA3B023F602332AE191D7CD5234F0DD932774EEBDC597955253B5A968CB2A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000f2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f2
Size 36KB
SHA256 98c0747479e474f64351bafb1e7086bbef3a9acd355e09e68efcd0ae57766af0
MD5 5b62a5563fb3fde2dc157f67bb9a7883
SHA1 8dc78f4f397ee18c028a4ac725b8b58cb3183d9b
SHA512 7c9012623cddddd7cff43653edbcaf5560a9fb694e9f0e67db340aeaf9c7b49c223b449ef8c55880170b8976b884acb724bb54ca2a04efe01ac41992daa5b3cc
SSDEEP 768:1yU82DkA0Iw05ln89gy6gIe+yYuSGBAQvHWN/eX/NoUxVHVLs8EpS0:1yl2Q505ln8+y7IeDSGmK2x4NoUxVHV4
TLSH
T1ABF2F1822D848BAB487E5FDE43AA23599E84C0EA6E559050DCFF851051041B69FFE9E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000fe

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fe
Size 16KB
SHA256 b17b23990851346a40d733da642788136fcc9913a5e690865be124637f16bf66
MD5 e97f51ffddb5102e601f568bebbe6656
SHA1 80b1ed86320c70b9a17f9d5981a132b9a4a6afeb
SHA512 0561e3a1f680d2cf8fa0d19282359588fbdb3a508831810aa5059d6b7b072c840b06323d4ce4c66464ab016fdca47bea6eedbd765acf8c6a503ff2edf91d5fb8
SSDEEP 384:PUsJMhkvuJpDKSNflVDtakrzt2ro/zvllLMZ3u:8bz7Y0ztmez3LWe
TLSH
T12872D0A96EF500237B2B8CEE15D083948E847AF36D6B7DF642883067849C6A17D1858F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00015a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00015a
Size 73KB
SHA256 5f66ef35f19e1bc8bfad52e2139ad510998e759dbb99d825f7876b8c3cdbdee6
MD5 3cacf51428fa145226351f4db893235d
SHA1 e65afd58ec5d9e1aada6996d71482ddcf9f9827e
SHA512 20df0266b4f3f351d860c174140c8f8f730a97b47f4e1fcf71e28503e03a460ff6df97614e48142bb52ff71e5d4d285da3c6401330287a50d7cdfa551448d23e
SSDEEP 1536:kkCI+9iACUcDsSByHXFtZiqVU3/+hnVVtRq+1z0hpTI+AuXkx+R+jy:W9BtcDRyVt8gnVVtRq+J8TI+XUxlG
TLSH
T1AF7302753BBF4E1A45D6FCC453E344184BF578AE6D65EE9F62A3C90EE831C46C00A292
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00017e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00017e
Size 21KB
SHA256 208d4fd9d5d6597169b748380d783c0961e9f03ac40b505b6a182a03333f6df4
MD5 027d291d25bdb1cfff71c478c9c4bc8e
SHA1 e1de8ba6f564db6290e0fff7d63bd1ee71a9f313
SHA512 0fd144570d60b9075def137f6f86f1dc14777769ebcf59fcca5a1154ebcc05834bb952adb1c8e1ec5a0671701970ec5321308cb13e8939b163d0235dc7792b51
SSDEEP 384:ksHy7OPMFqAFJklJNSWmLtDn8H5HdIY3QoPb0N8hrB8g21Sk2IPzlBLMn:ksS7OPqqyJkl2LB80YrsuySkvLlen
TLSH
T132A2D02143BA49B9106FF6CAB429332AC78999F266B4C455138C0F2B0C59A5BCE9598C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000185

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000185
Size 40KB
SHA256 32757dd7cdd69fc8b77e460fcf0b4354d7ba9b12b70b92175439c18f16ecc819
MD5 63f4bf4c9e4b2f5ac4b1c8a9f4a6d20a
SHA1 40d033d0f716458228ff5ae4c623b3eebd7e8f1f
SHA512 ca748a2e7f54c22bea5b6b586082ca9be3eaf1ee199fe56c7245229ee4f73d99778beb019d8eb33f2aff1800a3233a31d506274259cd791dcf82a994120143a2
SSDEEP 768:rQ0uU6UEmqopa8oTvB6vf26ER+musSjAPWL9f3+dvZDNiS+Hfkae76gpGnueZG:rQ0mUha8Hvf/mutjsU/Ux8S+/5e7FGI
TLSH
T18513F292D7F44C509F5DF2D163086CA1A77A2CF5A388529CB5E08F22A49457D018EFEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000186

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000186
Size 83KB
SHA256 b9cf829054644112cad26f89076f408cecf4260bc41ecf58632fd3b5d6fe9425
MD5 4f54fcea847826f6726a8a9f7c263fbe
SHA1 ffe769144e3f5a7aab2896c851d0ce1188d246fc
SHA512 997b7c85ad425a1206c08ce75e2634395ca28f18d0f93a8b31d55318c1d87f60b9d129dd6cf27901249ca47fa7a245d3d4fbd95b35d0010dce2480b49a755950
SSDEEP 1536:Nly7os2TXdq2GQFT99Qu+Kb5+z9xhWhJk4dMrXy4kR/HAvVlOINPDreRnL9ST7s:NSIMMRAo+z9xhMKrXyTolOINneNLkPs
TLSH
T14D830245A27FA80B18504EEDBFCD7ABA0F766B21D86580410D1B48D9E2A6D3D1633F74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0001cc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0001cc
Size 24KB
SHA256 e0812791355ac00dab87ecde7d795ccb5e73c807255da1dca53964e184d3ca8e
MD5 751bf81fb950c698f344ed86fc292b21
SHA1 49bcaa24205d21a7655ffe552325b9ada08e9555
SHA512 6757251d67abdf10506f13c7f9b588a05d27352770dab63af37b8c7b300fe7acc200febaad0c5e2e4dd8390f745e533023dba35fd62116c464ca103f183eee07
SSDEEP 768:530y8xOaLFGkzqgd/t4hJRXFf/P+71cXFrRY:5EVwyLWO/t2J9tocXFre
TLSH
T1C7B2D0463C5887371023AEAD17EFEAE7D2408965AD7C883CD3BB4C6F2E44D9C5A13945
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 9290588fff241b511f2281d4384be112d65deaa834023274b3ddf0016df8f4ea
MD5 2fdf371152481df79d5eb8a02686a203
SHA1 6d89f1ac2002fb962906770bef927a0799973a55
SHA512 7da8e1879ee1b15f5fe05698a77708d42494b85d66a30b3f4285972e77b2ba707b2b94a73c1920c1352cf1cedf11bb86f65148cd8289fdcb996ac3692a256654
SSDEEP 96:iWeNBTiUeiiszD64PUQA+0pQyhUlirG6dgblnhTGK1me:iWePmai+D9PtByhUl/lnhTLme
TLSH
T15DC1623F0B5A04E5F771DAF3A3F14A4C347A46EAF843BDB652C06A74FC9A750A289401
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58bd5f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58bd5f.TMP
Size 3KB
SHA256 7c467027b1779efaa982fd1ff3c530e2f75dc9ad8e46bf36c78ad97adec978b1
MD5 b3c2f82f19ba2d7849b96a3c80ff22c7
SHA1 9794bcb66e89288bb2356b68ffa98535e723b44d
SHA512 d5c4dfaa50eea727bb9541166e9c6c80a285bf59667d9a605b98dc428d800111d749506bca8ae3008b49a41b2fc15d7f9ffa98fc7064dc8f5c9df693974fa9ba
TLSH
T15581A7380E6F00B5F3B11FF2B3D14B44347E82EBF993BD9A62816A70790A761B2D9504
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_whatismyipaddress.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8d946761278a3614c0328e2d9bebe8d46b92ee1cb16b5e221cf31d1b380adf75
MD5 dc215d8c32ec4acbf8f0fe6ab0482648
SHA1 fcfd6149348f2fbb963f67f26b4070023f5b6bf3
SHA512 0f6c7063aa89c4193f404a78b1c9e5193c5615fd526606a04cc55a2649b749cc46d564b884b468323dd8154222f39ad92ca4f2a7049370f95b71d3109963ecde
TLSH
T10B4179F783F1856D9A125AF0AA18EE1BCE2C0511831C786989E0BE17D3E3871E102B5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 60KB
SHA256 f52dccb9143fb1b8bb7717b33c33591e5500c1357bc10d52e0e451fb70e4dc27
MD5 a615bef265b30c88ae72c552bb25cec5
SHA1 1d2cffdb36e6705957893dab8fbac6d06d3d0e8b
SHA512 298baf7e17500563af4d810319310b1b2b2a0125f16dc16ad0f823e85e70fa09ae8d476348b8cf02dd24fcfa04b37a69a348ea4be4ca2b441b1dbb8410ec9164
SSDEEP 768:YH4qngqmZkXSO+qdyjq8IwN01XpnaRfh2PPvZ4:VFAWh2PO
TLSH
T16C53BBF793B8C23CAA5299F0D684EE26CF6D0994432C3D9DC5D0BE8793E2522D50270E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 4e02d0817148ad334057ea3e0ea856c0e6577bfad9688ef26ddc4089b6fb5c87
MD5 fd5216de89465c5adf253253128b4cfe
SHA1 043cb3508f5b991c432e8e9eb61ddb1cb532b460
SHA512 9f326660a4a51d1838f57d526d05a4b2aaf101c34ea8d6971a028107eadfbee5648f6992f7951f0b8445d07e8c845a9430f4ed659f88a5fc9278b98194fbef2f
TLSH
T1FCD0239331417075559C7EE5C059AC4ECB69303048039DD510E0D9D905355DD0507090
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe59ec3b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe59ec3b.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 5d3ed90a2daec2615c3e9b8f991ee66e12f5ec9fcd41a3fedd18ad96031f840e
MD5 dc8085415757181ba221d663c9c5c0ed
SHA1 f438cd8dcbfd10abdeb2c8c4edde6ba42e690983
SHA512 026fa00f03ce21fcede6e1c825d96a0689f58f3ce650d35e2f69abd40bbc5d270616f29c016ef8f104626265b7f2e43838f28e0cc3b6b23b0545e3636d427912
SSDEEP 192:sxZrRcyM/jK1Ml8M0cB4H/fvsmjjvTe6ebwzaSdpvO3yb4bpHW6+WNjBJXquUHw5:sxZr2sm4H/fvsmj3bbeHb3M5/0s+x
TLSH
T13A82D992A5248977DCDBD619B921BF53D6F41463CE501E4CAAFCCA0C00E6BFE221781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 20KB
SHA256 5f3b1d627b26a20f36dedc949991cd79774d5a5f64f956bdd6317a63663ddb63
MD5 073cbffe46ee34e5120df20315b333ff
SHA1 757491924ccfdab5358c1d266abacf0818c43790
SHA512 27a82764a16a7bf390f845145ca8608f000105b088f7abeecffb32c3a933e34e87d3e467205c788a9671ddb330caeaa33001b6689e328e1afdc30da259ccc79b
SSDEEP 384:sxZ0na2qH2m4H/fvsmjP1baTI6RHbhlwMfnL8x:s2aZWm4H/fNjPxgRHbLAx
TLSH
T14092C753A524497B9CDBD219F921BF53E6B41462CE945E48AAFCCA0C04E6BFE2303C57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 22KB
SHA256 a660abeaf238f9089227fba78963bfa2a58ec1cf9d32c9af565b31170af72047
MD5 21bcd4a3c4c7da706fb35345502baa48
SHA1 444f6ecfab225304073787e05d03ab386f8f5649
SHA512 62ca3fcd69d6930308344e327c4c7be303e0ca6eaee8d3d90fcb1f33d62ae4f08c8ed1ef25575c5cfc1e212c04521013083c1600a6f7074571d96de6a5fbf7de
SSDEEP 384:sxZnlno2b5m4H/fvsmji1basIUJHbcWbrqMfuyD8x:s9oA5m4H/fNjixTJHb1Ox
TLSH
T199A2C8936520497B9DD7D129F921BF53E6B41462CE945E48EAFCCA0C00E6BFE2313857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 0ea22ed9c1ff3521a8a6a61e8a737e24a54550ea6f45e8d6d700d0dc8369fd01
MD5 2f144b49257130607c1f3867b0be78db
SHA1 ea3e3d2e7378aa0f72b098c5f43167e4e1d2c66d
SHA512 86ac38d4397f614f3ecbe687ea498c7acdb92303a86b068a82c34cb571de82bb9f216ce6c403de1a237377fed6ee2e929c39c776ed57f7c6561b9720298dd4fe
SSDEEP 384:sxZr2q5m4H/fvsmjhybbaaIJHbIlwMfFL8x:sTZ5m4H/fNjc3WHbyCx
TLSH
T17B92D852A52489779CD7D119F921BF52E6F41463CE945E48AAFCCA0C00E6BFE3213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3987932a7966329eef10461f11f8aebaa3f3f9e92b1bd5f94d2b8b03faf79814
MD5 855c78cac093a7771a220893f08ddef8
SHA1 25e80c5bccbeab59b58c18137b4054237d681d51
SHA512 22803784f69356b219f09700eb38713fadcf3b26a7cb2ff2e767f4e86971281aabf6e0bea7171386845e886bc67aa824dea0d786400652fe3025c86efc37aa8d
SSDEEP 192:sxZrRcyM/jK1Ml8M9H/fvs4j3pSIdp9OOPHW6+WNYJX/YzV+KeIgpJ:sxZr21H/fvs4DtBHbG/RT
TLSH
T12D52C7526A34997BCCCBD209BA55BF93D6F50422D6901E44AAFC8A1C00E6FED330781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 35a197aa0eed51e88be6c5e82a1c5ef6119a74ab09e5cc6a4aeb2179df4e30f1
MD5 b4773f7d2906478b67d0b6da9ebf9860
SHA1 91379370dea651647068b522b4689ea9da4bdd07
SHA512 b5428622a77a2bc75ed51f302b0cea6f57371cfe6d3836006963e88fb613af945eb9e88b5dca22e1ac803406805fc6cba9a0ff339183a862a658600f7a9f2a06
SSDEEP 768:CFW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSj9roIMiXYH:CFW7kf0Wvqidau1jaa5LA3j2XH
TLSH
T139D20A3B680CCB7E4F841E5CEC266F966ED801CB67988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\temp-index
Size 3KB
SHA256 79c0d178ab8b7b2c8d89d52e22ddea56292341a6bd8dd6ccbcb5f566fd10a740
MD5 5023355f4827ad8b1269297455d4b793
SHA1 dc742f08956d225b76b772e9ebed894d193a228b
SHA512 fc115f69b4d81fd263dd586a128ef73c7bbc2bc9de4abba471c3a83085d95ad237d4180c274863d49c1579e0252d6f6021a825a3fb967823f8a32230beb3c92e
TLSH
T1BC71D44E8E466E5FDC6C11B7A9FA20D5333578EC47488F0718AC29357C8732C2D8A2AC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index
Size 864B
SHA256 fec10b6ef545c349a891de3231d20cff9ce04956162ac25d2e1c638f7577586a
MD5 9d43f254d95dc6c2f1a1a2ecf8c70703
SHA1 0cd6a7fe073cc820ccc8b8069bc3ebd16b5ba906
SHA512 0ca27e08794c4848cb523060b012afa3fc9315c1a15860be5a4889cc6bfc54e0c0e4fd9b56887ced8273c8bf3f87c306f87964d90e9100ecf8922f5c5f49bff8
TLSH
T1D711D3564EA18D3FD95901B718FAA0E4B33159DC5321E6679C1C1A762C6734968071CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599c27.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe599c27.TMP
Size 864B
SHA256 fb82f2e31a046d7c38ed276b1405f6945ee57fdf125a42e3ee7839851ee2f927
MD5 c3467291a8f4231f6c18bd92d0073bfe
SHA1 ed1de1f1b4793b50193ef888f91cc1f56bb9ceef
SHA512 36c4f1def56587b9ef5c8930acfc978f27ae4eb1a86461de812d2efa115d55b49162f017198b267851e6ff06ab066a34f54c703223a61010ff144076a8e772b8
TLSH
T1C711A25A4B914E5FE844517B1D99E0F8F3314D009312F7A3A43D197A5D7A7C95A071CC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 4cf3ac5680ec735b681dd451a8a8b936b78ad2adc0115cc168d2a56653da16ed
MD5 669df0888b7baf9a580d2b277bd08608
SHA1 8b0eca8b12646c7d855a99c176b7b9bb606d7336
SHA512 884770765bb175d87c9660c36ca68661be247e66c470d58de0ea8bcf50ddc03a92b66a14060fe4ba3c0d2ec59925173ed49991b9b5f2427229bd4e9ab1d3ff41
TLSH
T1F5A0029702C44058D40715B4266A054A1602D92901492365D8D48144C890585CE6601C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dc577b94-5e5d-41ae-97a8-afa364edec75\index-dir\the-real-index
Size 72B
SHA256 bb949aeac2278f0c4d1cf87b52d7f681f47573101a3d8f4966a819f36a282c48
MD5 4c796927e2d2b7a39a61729af3bce15b
SHA1 716e40bcad45ad48ada0d74f2039b4a432596ff0
SHA512 80c421ae07ff8a2be76a236500a51756ca4a212e49b5821c9393cd09d7f44ac59730b9f1f00016d31c0e58de5e9b74b4b5725c7b6276d25c7db520f25c8fae4f
TLSH
T141A002118BC0821AD01B51F2165317511304C8902100574740D15084CC544918E4510C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 402ba0f630efd7d8c9fd03b7bb4746f2ce8d7b14fbc42c023bad69bcb1f1b35b
MD5 02a7f877f7ab38afa5e56e86e964565f
SHA1 4500648e61fab49226e485ea097f0c507320dade
SHA512 469a5d943a4a9db563b315e263debd9fc1073904098822310abba177441c430571eee22c54df080e2af4f01584f04b113a98d2c489442aab454f9bbc603ba0b3
TLSH
T14FE068BB2DFB2824AC6F97C138B155A081853928D500EC4E3027A28770F2751240AC21
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 ee2200ee79c6238bdfa08d421a80f38a2a95ede2dff11c7634d7972bb6834f7e
MD5 1bad58e2bf9819bf763b96b701860d21
SHA1 00a08fd55f122b1fd3c8597c1aa48d4dfba33a9d
SHA512 ba3b84f36bd6adf18cc250d65a88c53678dd738fdeabbd0595b3c3b0abe254bba54817148b6902c46603e30d5a96dc06e4d82080157e01ebb662ae887895441c
TLSH
T117E0D8BB2EFB2824AC6F97D538B165A0858539689504EC4E3167A69770F2755280AC21
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 eb189ef068aff502348d4139320ea2cc702d40ff109e15544e6cd695cb2c6fe2
MD5 ff1a43946511340f17ede4a4b4210bab
SHA1 53edcbd9b13780fbf9208bf9834aa8f8e5cef0f1
SHA512 649091410923500f4ea7a82a7fa2b64f1f3212bc3bf4b938369c97d6c56cc5001a6c0753fb55abeb8731d7fa7871c74341b1d6a06ab2ffe8dd2b3bf7f23bf5ae
TLSH
T113A00211CB959085E80102F191A251CC2214D8DC4649E23280BE5458D8737C051E3004
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 3f6e2eaaccfe7aede75790478f0246af62bbeeb2fdea85eb340124487e1689fc
MD5 397f89f8bd76513b9f940bf25cf783b4
SHA1 61567196bdd86d3695c8c558c05e02d2ece67e00
SHA512 c16802378f66219765b708b6e7bdf328570c9ad00cf82f911abbe15f433190dfec8dd72416362a8154198f4509429b3c8a08514632396efec5256748415aafd4
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 8a08023bdc8e2d89a427e179179b434ea0db49abf61a439ff207b922a0c7d65c
MD5 ffdab92414e6ade0c3081a693333a26a
SHA1 fcf4a8494ffe5e79929cd6914266895da215d904
SHA512 609cb571bf5b093323b951572fbc705a74e7b552ad62aa88f3b550cb77ce12ec576f67da1c63d8765d84ee0681e836167d9dd85eb64f67935c4c6992833b7712
TLSH
T1BFA0025119CB2C81D8591274608115CE631C59151B05A70BC5E41189C8AB5485205292
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3896.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a3896.TMP
Size 48B
SHA256 dedd5e257121ae0ee2e39015109d755d239e2b0836a81e4c0a4e6fe90abcf2d2
MD5 fc2d168d31a84f0e12c11acf61384b16
SHA1 73cf77985028e7c1b2afc80f02d5012b72d7cfa3
SHA512 fc18eaab1fa01d18fff7ca5d62f68a6dbb07b064ab01d9159e3b469f7151f7be1442cde8878fea91a6224449028fae852d058f1ab09232ee8817608e00411744
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 4ad6f9cdb7718e7957c16d791ff1f3283db7fe2e2c04698aa25b7e0a067a51f9
MD5 57cb13ed8ab08897ebd340e1548fc252
SHA1 9d03cabba02db3679fa70aa168c53dd9da73d1bb
SHA512 a4f373199ff68f10096f8ab7cbb1935011975b71291437bbcd57f23656bbbfb56c0489994f0b7f360e8a853fef057e7d1184ce68a1b30f07c6947876121ed6a1
TLSH
T15DA0022821715113C1881A705091E74412146C5440514F51A6E10D4AEDA50C05911041
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 400bd805c2568ef2a3f1cfc902297b824182fbc9f40fbf146a7d749164b68e6b
MD5 abdf2505fd59f5f888bcbe0219f730c1
SHA1 ae51506967771c81de644e903d02b75fe418d43b
SHA512 2f709c0765584b05aab8ec0618e6ddf14ed086d470d97bbe97f333fa9c964d7dd1e1cd55792c65c6f9a65175664d7fc8342fa85b9bb87be37ec52388a76ebe26
SSDEEP 96:KIbCKc061e6UccuKMf10auKsb0IuQCa34qv+XeKEckdqjXNn7vWj4mgfvK4+gBv9:sCFp/dqjXNn7Oj4XfV+gBkldQzLkg
TLSH
T118A13101753F06413DBD280CA565CA269E8272A33568A4FF7BB911A30E67E114EFECDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe593a21.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe593a21.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 00f508c80a9ace6bcea67ed73e68f93954be6e736137664dd81e2d1e31251a69
MD5 e67167e3bc258c1ceb88a51bbc5d1831
SHA1 d3c3df973ba325f57d9c637463e046d086951b52
SHA512 58eb74fa3074f33aeb59a3f3f30f933307339b626635e3d9a46e645bafd84cf402735391165a6332f09ba66808c66415d77a1906a51aa7a3e1a7c059391b042e
SSDEEP 384:ftNn/s3n9SMsN4LEB+4gwbbrIIdEaACEJrwWScjmwDM:fj+9zsf/r1yhwW1jnM
TLSH
T177927C325C269D6B5E92A155F4473A539FA841B797C02F84E6ECAF0C01DBBEC131782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a07a9d4e60bc9f4e45b815730b68a97996142ac0a377deb86ca61855eaef6a59
MD5 ab01a3d9e98397eaf3ed67e4e9855cd6
SHA1 efa4a22185cbcbeac38740e1a587851c3fd7a15e
SHA512 f6c50c80a5abc01e3a0001f0c2223e7f95561f1033fc85ed7338109b3c7846c20efba6ffba010302a13c3a4b3e25918818c310877ada687eb7838219f62ad167
SSDEEP 384:BtNn/s3n9SMsN4aEB+4gwbbrIIdEaACEJrwWScjmwDM:Bj+9znf/r1yhwW1jnM
TLSH
T1A1927D325C259D6B5E92A155F8473B539FA841B797C02F84E6ECAF0C01DB7EC1316826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 4dead552d396cec5ccc82e4c3b9607139f0f8dcfc18883f44cdf11b0001df6d9
MD5 36dcccef36333ef1a97f132121ff8f7a
SHA1 9805382e28f065affd1749a6e5bf1705a15087bf
SHA512 599b9f7fb8091e043a88db3993318e48cb5093c0ddcee8c1a50612809d342f3a6022d0e779fdfaf9d167293df6c0780492c1ff646e79607af6060b865e0a9355
SSDEEP 384:ctNn/s3n9SMsN4GEB+4gwbbrIIdEaACEJrwWScjmwDM:cj+9zLf/r1yhwW1jnM
TLSH
T1AB927D325C269D6B5E929155F4473B539FA841B797C02F84E6ECAF0C01DB7EC131682A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 baaf9a11aa09526981a12c98992bf05165084f7b1be77e765c0eea34f56a96bf
MD5 1b38527794e9efc0623acec87a779a11
SHA1 53d8cf452311ddb86ab3d3d3217440726779b226
SHA512 be0ea999e2f3f25be0fedc3c791db0f58013c171548b6975f17384ae3a3e8272f92cf1d02f8adf3b0cae53dfa4bc75b6d6ca11bb350adb5626fa3e3f6ef48dba
SSDEEP 192:MON664BAQmiUy611W5GBPKXo+FdGJaraDf2hLU6:MON66eAdHWTdEaQ4LU6
TLSH
T14902E935AC796C7B9EB2AE45F58737175FD8113BEAC52B44EAE85B1C009764C230382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 49e5f742b62a2d66e6de60cee556373748b50fb5a6870c6278d8a514735ce7fb
MD5 1ea0d6bc0395c5c5f027aac7e45b8072
SHA1 871b5913c025ca72482174f047fd18f299effb7c
SHA512 5626682c2fb87dc5dd23e2119c69f234d80ce7b3c0e81bb5dfe76595b41c3f4e40cfc133b746230a786b2369b9ac5415e6df3f50fd5c0e476eecdad231e78314
SSDEEP 384:yiFKtNn/s3n9SHgsND8TUNTUlIlLT3B+4gwbJfZ2IdEaACEJrpWScjmwDM:5FKj+9XQwgbf/5ZLyhpW1jnM
TLSH
T105D22BF348D7897AD99D5747E77E2E028EBCC163B6806A40B7985A0CCCC66BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7f6d376842dc2cf3c77569855e4c42b783b95fe0c114097d60190a38b8bbd602
MD5 ec61e2018e58387b345e70c35b4c92ea
SHA1 e91a9386647f2df146627b7fa241c237cb8b7d3b
SHA512 bc85705e45f9a80580fff8f730c77ddc70bdeb04d50ba441cf71ded176f43b7bf8e5b85576c080b20c82028e56c1a82d0d0f721ebb252f6c22b98b974857fd14
SSDEEP 384:yiFftNn/s3n9SHJsND8TUNTUlIlLT3B+4gwbcKuIdEaACEJrTWScjmwDM:5Ffj+9GQwgbf/fDyhTW1jnM
TLSH
T127D22BF348D7897AD99D5747E77E2E028EBCC163B6806940B7985A0CCCC66BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 85bdd4491c6fc38bef5b85740bceb5154091d3f1eedaededc48432fb3e7e2f30
MD5 c72acbce2565c965744d90990558cddd
SHA1 ba5efd462c174bae29a46484eb08fa2fba34fbe4
SHA512 7d7c1b32f31fbd337d22d768c3b108b4584aa6c0181caeaad3bdc86e2c529c53e15825ab0f7cee9377d8f6aff7d595964fc216c4d9b8cf1801960d4d0f4e8d7f
SSDEEP 384:yiFbtNn/s3n9SHTsND8TUNTUlIlLT3B+4gwbJ3zIdEaACEJrpWScjmwDM:5Fbj+9kQwgbf/NUyhpW1jnM
TLSH
T11ED22BF348D7897AD99D5747E77E2E028EBCC163B6806A40B7985A0CCCC66BFD306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 1701a55bb3ce1f975e3c205bef258e61bbc641d9aebebe037ae18376758ac368
MD5 ca7418c7e8138585954010e0710d07b9
SHA1 4d8136bbf9ecb3f895a4b3dbf21c37104a758ec6
SHA512 1f363abc4081ccc960141fe3c99f948dbc2b5a85b47d40af1d73070056bbbfda61d1fe3034aa71ce43b5e6bc9a01348e1d35589677a853bc1b92e9f7f55eecb3
SSDEEP 192:oONJ64B/QmiUyr1925GBPKXo+FdGJaV6FC1SJrvWwftqHU6:oONJ6eBg4TdEaACEJrbWU6
TLSH
T178122B359864AC6B5EA2B541F48737139EE4413BEBC57F84E6EC6B1C01EB79C2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 e1864b8a08d13bdf425ef73f4b4d8f41fba51099d3bc1f42a01f9878be435235
MD5 9376db62f39d6829d53e0a5759e8c84d
SHA1 d979b86910fa35cf017094f3227c0400ee167bad
SHA512 60ab8f68c901bdb25b3d95bf272b185e0aea9b8a70d9f5b8c2f21ff5b236186bac6216ae388150c6615e2e8ddae4c8c339861e520b6d2e368a0d5da0f474a411
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 265aa45536353dc001fddfb97acab43fbc419d3e09d1ebe5031cb9a3ff6283fb
MD5 65e07ee8bc80e04536786af90f696f8f
SHA1 6a191f5a83ceac1413892d711c448b3eb32af076
SHA512 8efd251d1facfdd700b257cf3cec9a0260c65f8bea45a8640310c036d7da2d4eac2087b592870ea715762ab05e638af42813d91e1c3704cfeb84ae93370b4bff
TLSH
T1C4E0045B930010AFC538133855C72B313BF3C2A147B70B8B9E6555B96D6BB046FA5E81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 5d7dfcf179523a20e261cec10ea262d797a1d5bf30914ab222750210f1f9f942
MD5 5804d9040e9653db6aba30420d0a5779
SHA1 33e1bf8c68aa00d10d70c72a1413a2fcb50eef8b
SHA512 f801521b989081f7bfb38b8bbf2546c781993585cf2e41062a13babc965b9909a4a7f070ef92d0acb1b70b4e69ac0597008df800eeca49cd17d4eedc65a29e8e
TLSH
T18FE00106930010BEC13C03301187133223E6C12002B20787885401616C072100F30EC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d110a1a2e84692fa8272999bbad1182f0197eefc5b06a7cf6bd9fb7be0971e41
MD5 995a69397ef513838931b82dfb3ac542
SHA1 6ae29ec03f630997a8ffc3c2b4f0bd95b03f5049
SHA512 e029e307f63bc0abce496eff5dffc80cee37afaf03ddb44a2adfcbba79b657f78f08a1c343bd2e6c338072f7eb2b92d4e32dd649ceb9591aaf9aab708152a90a
TLSH
T1B9E0010B930010EFC13C133451C7273223E7C22043B707878D6411716C0B7104E21EC1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 356ff3bbe8a9c6d79b08dc15c68854d85f64c60fb0bc3175aa575648cf3d4a44
MD5 c7b20fe187862ebd33298ab6f3f51771
SHA1 e0e5b422d04accf45348d29127fc09890c6a91e9
SHA512 303bca2d50f2862d1bbf1da8c81ed5dee491d04a703bedc6dacde925563e067277c79b0170045d27ac220c13ca3aeb17815770c547c65a1cb4689a594adb342f
TLSH
T19BE0090B930010EBC128133451C72B2133F3C2A043B7078B8D6455716C4BB005EA1A81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59cd68.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59cd68.TMP
Size 392B
SHA256 f1d25f34f3796b8e03f0936a8aa25c3ff7b3251cbe7d8c7f94ebca50488637a9
MD5 f124a1799d16214e591d2db29f30b61c
SHA1 eab8f5acd441d142d232bad87a58eb1ee4103e4f
SHA512 f2b2b9563eb7fbb9ba6bdf50b07d0be3d9be6a1c905306b3d41d00e8a00011ee8b0e3c3150781343d459d174d140f843aa1551fb747a810405cb57015821ffdb
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0cd2496a58594c6a0fae3c4bc76f5dff4411e683cd1d03cea912ae45f2b42637
MD5 50d378efd66c97600da2c0793383e2db
SHA1 98273081fc6e92e61b9b2896b2b50d8f31f61860
SHA512 b386e61596d947f1dc1bb69bf7a5e507de296663b42b31e68a44372ed6fc9340f1f317ffa4023600143c432af8d224f9988daefba8eda505a21f5b7aebface5e
TLSH
T1BB41F898B6F91148B3B36F5B9BF2986E447B78732E06D05D10110E4F0A62A40CD6273B
MD5 SHA1 SHA512 TLSH

Submit Download