0d3c6e9d4a7399bfbc7d6598b434ea1e1422626822140bc2fe23c4f963ee3532

Analysis

max time kernel
20s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 10:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe
Size 65KB
Sample260804-mljz3stvby
SHA256 0d3c6e9d4a7399bfbc7d6598b434ea1e1422626822140bc2fe23c4f963ee3532
MD5 9e53d5835c5476f57ba64ea5ac9356eb
SHA1 78266d690caa8aaf88bd3fe2f5747243dada5a9c
SHA512 627621373fdbe3d9efe663401873849f60572398ee8bf77a030298c871eba5cdb9552598876cc536a970a7e6ae4410c91d45ddbd0afa6f0241b9d05f05e436f0
SSDEEP 1536:WnJkrh6DM6i6Bs7Zg7WZRgBpB1peEnZ6W:6k9Ue6BsfrmAEnh
TLSH
T14C53D719B3A220F9C159D179A3E756B3EA73F83111216FAE0394CA792FD4C907F6D620
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\msedge_url_fetcher_4816_635920785\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_108_1_0.crx	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1260	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303132058301120"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{3F7CEDB8-BBA4-48CA-A061-97315C08A5FB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe
1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe
4816	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe
4816	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4816	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1200 wrote to memory of 4816	1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe	90
PID 1200 wrote to memory of 3296	1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe	91
PID 4816 wrote to memory of 4932	4816	msedge.exe	92
PID 1200 wrote to memory of 4116	1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe	172
PID 1200 wrote to memory of 4076	1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe	94
PID 4816 wrote to memory of 1260	4816	msedge.exe	95
PID 4816 wrote to memory of 4704	4816	msedge.exe	96
PID 4816 wrote to memory of 4704	4816	msedge.exe	96
PID 4816 wrote to memory of 4704	4816	msedge.exe	96
PID 4816 wrote to memory of 3160	4816	msedge.exe	97
PID 4816 wrote to memory of 3160	4816	msedge.exe	97
PID 4816 wrote to memory of 3380	4816	msedge.exe	99
PID 4816 wrote to memory of 3380	4816	msedge.exe	99
PID 4816 wrote to memory of 3380	4816	msedge.exe	99
PID 4816 wrote to memory of 6112	4816	msedge.exe	100
PID 4816 wrote to memory of 6112	4816	msedge.exe	100
PID 4816 wrote to memory of 6112	4816	msedge.exe	100
PID 4816 wrote to memory of 1144	4816	msedge.exe	101
PID 4816 wrote to memory of 2324	4816	msedge.exe	102
PID 4816 wrote to memory of 1144	4816	msedge.exe	101
PID 4816 wrote to memory of 1144	4816	msedge.exe	101
PID 4816 wrote to memory of 2324	4816	msedge.exe	102
PID 4816 wrote to memory of 2324	4816	msedge.exe	102
PID 4816 wrote to memory of 5820	4816	msedge.exe	103
PID 4816 wrote to memory of 5820	4816	msedge.exe	103
PID 4816 wrote to memory of 5820	4816	msedge.exe	103
PID 4816 wrote to memory of 3000	4816	msedge.exe	104
PID 4816 wrote to memory of 3000	4816	msedge.exe	104
PID 4816 wrote to memory of 3000	4816	msedge.exe	104
PID 4816 wrote to memory of 1136	4816	msedge.exe	105
PID 4816 wrote to memory of 1136	4816	msedge.exe	105
PID 4816 wrote to memory of 1136	4816	msedge.exe	105
PID 1200 wrote to memory of 5480	1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe	167
PID 4816 wrote to memory of 4212	4816	msedge.exe	107
PID 4816 wrote to memory of 4212	4816	msedge.exe	107
PID 4816 wrote to memory of 4212	4816	msedge.exe	107
PID 1200 wrote to memory of 4120	1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe	108
PID 4816 wrote to memory of 3236	4816	msedge.exe	109
PID 4816 wrote to memory of 3236	4816	msedge.exe	109
PID 4816 wrote to memory of 3236	4816	msedge.exe	109
PID 4816 wrote to memory of 5640	4816	msedge.exe	110
PID 4816 wrote to memory of 5640	4816	msedge.exe	110
PID 1200 wrote to memory of 2024	1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe	111
PID 4816 wrote to memory of 4196	4816	msedge.exe	303
PID 4816 wrote to memory of 4196	4816	msedge.exe	303
PID 4816 wrote to memory of 4196	4816	msedge.exe	303
PID 4816 wrote to memory of 3684	4816	msedge.exe	114
PID 4816 wrote to memory of 3684	4816	msedge.exe	114
PID 4816 wrote to memory of 3684	4816	msedge.exe	114
PID 4816 wrote to memory of 4140	4816	msedge.exe	115
PID 4816 wrote to memory of 4140	4816	msedge.exe	115
PID 4816 wrote to memory of 4140	4816	msedge.exe	115
PID 4816 wrote to memory of 3408	4816	msedge.exe	116
PID 4816 wrote to memory of 3408	4816	msedge.exe	116
PID 4816 wrote to memory of 3408	4816	msedge.exe	116
PID 1200 wrote to memory of 3612	1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe	272
PID 4816 wrote to memory of 3208	4816	msedge.exe	118
PID 4816 wrote to memory of 3208	4816	msedge.exe	118
PID 4816 wrote to memory of 3208	4816	msedge.exe	118
PID 4816 wrote to memory of 4664	4816	msedge.exe	119
PID 4816 wrote to memory of 4664	4816	msedge.exe	119
PID 4816 wrote to memory of 4664	4816	msedge.exe	119
PID 1200 wrote to memory of 2428	1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe	274
PID 1200 wrote to memory of 1856	1200	2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe	121

C:\Users\Admin\AppData\Local\Temp\2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_9e53d5835c5476f57ba64ea5ac9356eb_cobalt-strike_conti.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of WriteProcessMemory
PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://pornhub.com/
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ffee5f0c188,0x7ffee5f0c194,0x7ffee5f0c1a0
    3⤵
    PID:4932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2092,i,17507265611382861697,12967414901352816089,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:11
    3⤵
    - System Time Discovery
    PID:1260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1896,i,8175943586307170805,10387648376429606889,262144 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
    3⤵
    PID:4704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2684,i,6612927793183515601,65572269611992744,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:13
    3⤵
    PID:3160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3600,i,8303298162823529836,8534737590631998918,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=3748 /prefetch:1
    3⤵
    PID:3380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,3450408270282852748,17615838125619802023,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:1
    3⤵
    PID:6112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,2601239154758500523,9350417358589857132,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:1
    3⤵
    PID:1144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4384,i,4253720250140379255,6598473361778393092,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:1
    3⤵
    PID:2324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,16195971180547525144,259359752301700899,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:9
    3⤵
    PID:5820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4572,i,8124076690877311259,16422585535525026422,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:1
    3⤵
    PID:3000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5460,i,6759731945625617836,16302748466092288080,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:1
    3⤵
    PID:1136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3616,i,14337107579740686871,2879856793165937171,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:1
    3⤵
    PID:4212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5916,i,17063912891282761846,16169134663800178993,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:1
    3⤵
    PID:3236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,5084704416673139273,770378838526486085,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
    3⤵
    PID:5640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6264,i,4958082961771368057,5981706641624541141,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:1
    3⤵
    PID:4196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6384,i,11110581190995979289,5775355349695365092,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:1
    3⤵
    PID:3684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6556,i,9079517520695457084,220655266006811284,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:1
    3⤵
    PID:4140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6776,i,3845505945826431999,12238307270564861541,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:1
    3⤵
    PID:3408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6080,i,1085459300941723595,4273380088211350758,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:1
    3⤵
    PID:3208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6964,i,12798830928898626128,4047013682721194020,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:1
    3⤵
    PID:4664
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8096,i,3714220497068075432,3098785326823232361,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=8104 /prefetch:14
    3⤵
    PID:3972
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8096,i,3714220497068075432,3098785326823232361,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=8104 /prefetch:14
    3⤵
    PID:4472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5920,i,17705549342870907645,269698359887548785,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
    3⤵
    PID:960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,16693764416028549389,1822456730922450226,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
    3⤵
    PID:5636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7100,i,13160863400082517836,17903031446854991215,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
    3⤵
    PID:2572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7136,i,6729648995566183810,2446017238690677801,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:1
    3⤵
    PID:4860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7296,i,10085084287443869278,13048598067615053051,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:1
    3⤵
    PID:4708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6752,i,6616146914095253150,7029856219312098054,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:1
    3⤵
    PID:2996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7272,i,16148648626301869247,13980977984721539131,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:1
    3⤵
    PID:5948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7612,i,16972823408419677412,16658615718334046284,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:1
    3⤵
    PID:3296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7328,i,1966540064882758123,17044054720934970146,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:1
    3⤵
    PID:5868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7376,i,4641772012445639720,11513982657520569854,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11052 /prefetch:1
    3⤵
    PID:5912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7668,i,14066298338510270402,16864447255120584679,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:1
    3⤵
    PID:4516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7740,i,8703572121045408288,9528902757588196764,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:1
    3⤵
    PID:3280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7352,i,340116814423701879,15761473442226857323,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:1
    3⤵
    PID:3648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7248,i,16082935672716769544,15730278293524237305,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:1
    3⤵
    PID:3156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7384,i,5395630603727403418,9532617757764223203,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1
    3⤵
    PID:3824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7456,i,6834446743907500841,17802206866994743594,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11084 /prefetch:1
    3⤵
    PID:3216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7496,i,8644149017855094135,6589307076178234843,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11104 /prefetch:1
    3⤵
    PID:5040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7468,i,16477215007673236021,3281294727228630560,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:1
    3⤵
    PID:1256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7568,i,5233565474693329102,12979486464555070977,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:1
    3⤵
    PID:1760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=7560,i,1180713890276661029,5560419265523855634,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=5596 /prefetch:1
    3⤵
    PID:4148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7944,i,10517879334931677845,1129415522921614983,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11176 /prefetch:1
    3⤵
    PID:5752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7964,i,5170598355722481998,4333641184993847248,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11204 /prefetch:1
    3⤵
    PID:2264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=7696,i,5138184466175384110,9549287086116619081,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:1
    3⤵
    PID:4104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=7988,i,9973032236412816477,991763974915401178,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11188 /prefetch:1
    3⤵
    PID:3540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7656,i,9378999424918013613,3039137171497576591,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=10924 /prefetch:1
    3⤵
    PID:828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=7828,i,2243534644832161468,8788286682629976956,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:1
    3⤵
    PID:2856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8132,i,18144127556110602324,16472618196033636741,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11252 /prefetch:1
    3⤵
    PID:2304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8228,i,8237166334425243347,10644049923422112292,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:1
    3⤵
    PID:932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8240,i,15149065844795034109,6176876858243415880,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6816 /prefetch:1
    3⤵
    PID:2732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8528,i,13606341744350857528,2274728465888920103,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:1
    3⤵
    PID:5980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=8280,i,1921195878697053798,8513343661774267691,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:1
    3⤵
    PID:1236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8608,i,14507071247946708213,10626000300595679129,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:1
    3⤵
    PID:3464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8652,i,8265061451955346428,7042230281114242055,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=6804 /prefetch:1
    3⤵
    PID:5216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8672,i,15886893381002256538,15847918237610680497,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11276 /prefetch:1
    3⤵
    PID:1384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8660,i,6763449462917747788,4989198136747701449,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11296 /prefetch:1
    3⤵
    PID:1104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=8800,i,6686344816211451658,9096285679515189423,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11336 /prefetch:1
    3⤵
    PID:1080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=8852,i,14915701149587049884,8955220584411684173,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11376 /prefetch:1
    3⤵
    PID:2760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=8740,i,12527110677989355212,16233299538064603451,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11316 /prefetch:1
    3⤵
    PID:1748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=8816,i,9515500131578098525,1029521935517649555,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11356 /prefetch:1
    3⤵
    PID:4920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=8884,i,10361800536026746799,14230668067391600192,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11568 /prefetch:1
    3⤵
    PID:2596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=8912,i,2479529285550699846,8141847108826732621,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11428 /prefetch:1
    3⤵
    PID:3696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=8936,i,14259821923802505557,11373099588277042169,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11572 /prefetch:1
    3⤵
    PID:5408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=9004,i,11042637606459331884,3963761887273765327,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11588 /prefetch:1
    3⤵
    PID:856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=8872,i,8471941475990677913,3150526437970602572,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11412 /prefetch:1
    3⤵
    PID:2200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=8976,i,7808523855382848127,9141808869547089432,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11576 /prefetch:1
    3⤵
    PID:3612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=9088,i,5959633508563493674,16464438957938764589,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11680 /prefetch:1
    3⤵
    PID:1324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=9048,i,8266418554054986439,16168298857123569509,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11488 /prefetch:1
    3⤵
    PID:2428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9056,i,11839148237823890271,9754195566974746458,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11528 /prefetch:14
    3⤵
    PID:2152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=9084,i,16881991579851783143,2103786665240883423,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11676 /prefetch:1
    3⤵
    PID:4668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=9144,i,2839820375432623567,9643343102637140419,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11812 /prefetch:1
    3⤵
    PID:1124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=9192,i,14913771647497636829,9611022916614403446,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11808 /prefetch:1
    3⤵
    PID:2580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=9092,i,5337341527795800336,915946193581136198,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11664 /prefetch:1
    3⤵
    PID:3708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=9236,i,5155533280711131298,5434349852964986422,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11792 /prefetch:1
    3⤵
    PID:4540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=9240,i,3625824227721830955,11348024550578231013,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11804 /prefetch:1
    3⤵
    PID:2004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=9468,i,163864037834773443,11873068701206488392,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11968 /prefetch:1
    3⤵
    PID:3332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=9420,i,14259349836162454393,9442964669180947617,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12040 /prefetch:1
    3⤵
    PID:5840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=9476,i,13942910081069102513,1093181049181791282,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11928 /prefetch:1
    3⤵
    PID:4572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=9788,i,9423171831436281875,12316964396405263466,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12152 /prefetch:1
    3⤵
    PID:5572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=9200,i,17766779318670250769,12153181494952798309,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11820 /prefetch:1
    3⤵
    PID:5860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=9296,i,12380845987196705774,6295730842289643839,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11840 /prefetch:1
    3⤵
    PID:2588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=9964,i,1406584141081764298,15238231694818520781,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12340 /prefetch:1
    3⤵
    PID:4796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=9412,i,11773318994543135227,1241230860805611479,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11920 /prefetch:1
    3⤵
    PID:5032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=9820,i,5625623175283725707,7787602515922811664,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12256 /prefetch:1
    3⤵
    PID:5596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=9812,i,10963259505255899613,8897662830753321753,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12300 /prefetch:1
    3⤵
    PID:672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=9772,i,5517893518892352768,9475217416380928669,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12144 /prefetch:1
    3⤵
    PID:1900
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=9444,i,16542255200539163248,2807131092633740636,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11908 /prefetch:1
    3⤵
    PID:5224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=9740,i,7653476675686776769,8325614543192061951,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12120 /prefetch:1
    3⤵
    PID:2412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9324,i,9318498089902259398,12698146420534338193,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11860 /prefetch:14
    3⤵
    PID:1840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=9620,i,2557114388634506135,14581867525894687048,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=11988 /prefetch:1
    3⤵
    PID:5020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=9392,i,6080083865607389212,5599609847013688030,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12012 /prefetch:1
    3⤵
    PID:1416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=5472,i,13022608424649891097,13458983254826759173,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12048 /prefetch:1
    3⤵
    PID:2420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=9808,i,11129562979983665243,488012305987593753,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12292 /prefetch:1
    3⤵
    PID:6024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=10340,i,5548332580216046918,11946124268791666993,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12424 /prefetch:1
    3⤵
    PID:2496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=10396,i,11298527027815050249,5523620660648300910,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12416 /prefetch:1
    3⤵
    PID:5036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=10328,i,11099143912155028861,13905076356253430396,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12444 /prefetch:1
    3⤵
    PID:5288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=4272,i,13031769250297672927,7375724845918422479,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12476 /prefetch:1
    3⤵
    PID:4196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=9996,i,5918189322963033435,12504221810065531696,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12328 /prefetch:1
    3⤵
    PID:6156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=10324,i,17178932457764367355,13603182614015023940,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12396 /prefetch:1
    3⤵
    PID:6148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=10444,i,17336039410071659331,12526587415145491988,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12588 /prefetch:1
    3⤵
    PID:6164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=10116,i,16618512288991426128,10456202553893220146,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12728 /prefetch:1
    3⤵
    PID:6212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=6792,i,7167729147150624106,7368681524687659598,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12820 /prefetch:1
    3⤵
    PID:6240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=5796,i,12771797413691604445,17381795905581317361,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12860 /prefetch:1
    3⤵
    PID:6248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=8052,i,8926720636761431203,9856746484914990507,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12616 /prefetch:1
    3⤵
    PID:6180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=9532,i,9577990726979535177,5299591284193155553,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12980 /prefetch:1
    3⤵
    PID:6256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=9576,i,5717869357927361729,7763002291043898697,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12984 /prefetch:1
    3⤵
    PID:6264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=10484,i,16026501230722373877,5162062808256116860,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12608 /prefetch:1
    3⤵
    PID:6172
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=10316,i,8676091420194326111,12155457840142834622,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12988 /prefetch:1
    3⤵
    PID:6280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=10512,i,18382085823415622975,13432051427735557943,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12968 /prefetch:1
    3⤵
    PID:6288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=8944,i,18240392159622427308,6766628071438481315,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13016 /prefetch:1
    3⤵
    PID:6296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=10148,i,14006403264992367466,9249325127444854390,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12544 /prefetch:1
    3⤵
    PID:6224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=10192,i,9215936248919594055,11217331626935840424,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12780 /prefetch:1
    3⤵
    PID:6328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=10228,i,8301188696733284392,12116179898892812114,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12624 /prefetch:1
    3⤵
    PID:6188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=10112,i,7812289603602090054,240128706318124914,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12576 /prefetch:1
    3⤵
    PID:6204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=9696,i,3870749162963544846,14205119831154715795,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12840 /prefetch:1
    3⤵
    PID:6336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=10208,i,5393830780282997710,4392855343070044945,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12732 /prefetch:1
    3⤵
    PID:6232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=10452,i,8973234192669639767,5881778168002101691,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12612 /prefetch:1
    3⤵
    PID:6196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=10032,i,3128445687759491585,11337644378070671382,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12800 /prefetch:1
    3⤵
    PID:6272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=10544,i,7738417357336851432,6781665215806206433,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12996 /prefetch:1
    3⤵
    PID:6304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=10036,i,18067070216341206914,12638221494960857646,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12692 /prefetch:1
    3⤵
    PID:6320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=10640,i,7546087195022750687,1369353540906615450,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13156 /prefetch:1
    3⤵
    PID:6352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=10692,i,125910852243746010,18312943780063611486,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13208 /prefetch:1
    3⤵
    PID:6360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=10684,i,8244707195781791423,4953203690934503210,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13212 /prefetch:1
    3⤵
    PID:6368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=10780,i,1901882737229839299,7292751995566373152,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13228 /prefetch:1
    3⤵
    PID:6376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=10016,i,1799541708902868096,13195713213903337969,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=12664 /prefetch:1
    3⤵
    PID:6312
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=10576,i,17606072335172730712,4469213176889580319,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13096 /prefetch:1
    3⤵
    PID:6344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=10808,i,143190194868033153,8238819059272189337,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13412 /prefetch:1
    3⤵
    PID:6384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=10800,i,13153500517903860894,7457963307766322338,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13240 /prefetch:1
    3⤵
    PID:6392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=10880,i,2978374772370016423,8455277879595800068,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13408 /prefetch:1
    3⤵
    PID:6400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=10644,i,1732748981944843029,13926681640482741792,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13152 /prefetch:1
    3⤵
    PID:6408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=10884,i,2400550214255398553,15752830192082174472,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13260 /prefetch:1
    3⤵
    PID:6416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=10916,i,4197863454849449632,8044312608286550381,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13516 /prefetch:1
    3⤵
    PID:6424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=10828,i,4760252716330113370,7284160988240739119,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13512 /prefetch:1
    3⤵
    PID:6432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=10920,i,12127930028139845970,10482442184016693044,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13520 /prefetch:1
    3⤵
    PID:6440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=10968,i,7871560346674775932,11627290673247307175,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13548 /prefetch:1
    3⤵
    PID:6452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=4492,i,11518388977486103731,10493436295054765359,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13480 /prefetch:1
    3⤵
    PID:6448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=11012,i,13136979404609082530,2903981151858062572,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13552 /prefetch:1
    3⤵
    PID:6464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=10612,i,5750897056508526583,2621188764667979922,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=13216 /prefetch:1
    3⤵
    PID:6472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=744,i,10977739640821230895,16580700904855975700,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=1400 /prefetch:14
    3⤵
    PID:7788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=26180,i,14938035597601338551,17387104037824897607,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=26304 /prefetch:14
    3⤵
    PID:7796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=26272,i,6713916470499906800,15104187076817827023,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=26348 /prefetch:14
    3⤵
    PID:7808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=26364,i,6907752709248068610,9038489770704839642,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=26376 /prefetch:1
    3⤵
    PID:8084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=23632,i,3410703805353958795,7726388689333908099,2097152 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=4852 /prefetch:1
    3⤵
    PID:8944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17280,i,8127443158269271241,11660170158695159441,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=22240 /prefetch:14
    3⤵
    PID:6964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=26584,i,9972149416211011177,3244319148997159551,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=26580 /prefetch:12
    3⤵
    PID:7068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8152,i,3865888336296475114,17113103702696874898,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=9744 /prefetch:14
    3⤵
    PID:7680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=26876,i,2146054927460360229,16063373538126885465,524288 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=14928 /prefetch:14
    3⤵
    PID:8344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=11796,i,12024173018110655410,1544934176361266751,262144 --field-trial-handle=2256,i,2043935790500528627,18164438803456771436,262144 --variations-seed-version --mojo-platform-channel-handle=9920 /prefetch:10
    3⤵
    PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://pornhub.com/
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://pornhub.com/
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://pornhub.com/
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.xvideos.com/
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.xvideos.com/
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.xvideos.com/
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.xvideos.com/
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.xnxx.com/
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.xnxx.com/
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.xnxx.com/
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.xnxx.com/
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://xhamster.com/
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://xhamster.com/
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://xhamster.com/
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://xhamster.com/
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.redtube.com/
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.redtube.com/
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.redtube.com/
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.redtube.com/
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youporn.com/
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youporn.com/
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youporn.com/
  2⤵
  PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youporn.com/
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.tube8.com/
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.tube8.com/
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.tube8.com/
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.tube8.com/
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.spankbang.com/
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.spankbang.com/
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.spankbang.com/
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.spankbang.com/
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://beeg.com/
  2⤵
  PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://beeg.com/
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://beeg.com/
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://beeg.com/
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.eporner.com/
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.eporner.com/
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.eporner.com/
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.eporner.com/
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hqporner.com/
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hqporner.com/
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hqporner.com/
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://hqporner.com/
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.tnaflix.com/
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.tnaflix.com/
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.tnaflix.com/
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.tnaflix.com/
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://motherless.com/
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://motherless.com/
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://motherless.com/
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://motherless.com/
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.nuvid.com/
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.nuvid.com/
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.nuvid.com/
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.nuvid.com/
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://txxx.com/
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://txxx.com/
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://txxx.com/
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://txxx.com/
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youjizz.com/
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youjizz.com/
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youjizz.com/
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youjizz.com/
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://porntrex.com/
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://porntrex.com/
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://porntrex.com/
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://porntrex.com/
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.vporn.com/
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.vporn.com/
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.vporn.com/
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.vporn.com/
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.cliphunter.com/
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.cliphunter.com/
  2⤵
  PID:5360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.cliphunter.com/
  2⤵
  PID:200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.cliphunter.com/
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youporner.com/
  2⤵
  PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youporner.com/
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youporner.com/
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youporner.com/
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.sunporno.com/
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.sunporno.com/
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.sunporno.com/
  2⤵
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.sunporno.com/
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.muchporn.com/
  2⤵
  PID:476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.muchporn.com/
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.muchporn.com/
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.muchporn.com/
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.hotmovs.com/
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.hotmovs.com/
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.hotmovs.com/
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.hotmovs.com/
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.babes.com/
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.babes.com/
  2⤵
  PID:476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.babes.com/
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.babes.com/
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.pornmd.com/
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.pornmd.com/
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.pornmd.com/
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.pornmd.com/
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.fuq.com/
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.fuq.com/
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.fuq.com/
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.fuq.com/
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.4tube.com/
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.4tube.com/
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.4tube.com/
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.4tube.com/
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.sex.com/
  2⤵
  PID:932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.sex.com/
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.sex.com/
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.sex.com/
  2⤵
  PID:2556

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3156

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 17d500b4417e92837c05a8187f43f060e09191612c25892f2c54e786bd254c36
MD5 ca52a84f03e904e79c2a5651b273e5fe
SHA1 61ddeaf1850d81986389db97ff9470b67eb8cb1d
SHA512 d1f489b74d4da21280e354fdfd91d6569edfcb1abc7f4f6740756bbe744f02bd51136d5ea47c7a6a1842683dc3eba0d2608d4d46e5eb8ffb5035ffeb98f9c788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7G:fwUQC5VwBIiElEd2K57P7G
TLSH
T1B9B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
Size 95KB
SHA256 d21a0ee82e405eb6d948c3e94d188040d7417b0d2feb56451aa32fce1f4c4db7
MD5 8246140f71536886d574bcfd2b19a7de
SHA1 c665933847daf4051ccdf0cec8615ef579fcb838
SHA512 0e9016d77b138ea03f80f7a48e89650040ae1ec95aeea3222ff2693933e04c56b623ed36871ede9ef65e2c965cf51925a6f4cd1f69ff22fd5c9ea5d6cec178c0
SSDEEP 1536:E9TDLeBDz+F4kVY9xzUpfMKoeUW1lygEP6kDLMXv8vGXvl5fxCVL:e+xELuQpfREykf48q95ZWL
TLSH
T19CA3126DD3903F94B402F12226F2F2CE6206435AAEA01D7436F77BB9FD17E5584A2815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 92KB
SHA256 0109f787516c16b21759aa2d569bb0a6e247d388b6b6ea5d7e5d95b7c708a652
MD5 95444545e827d4464ddcadcf859643b5
SHA1 c9f781e5bd794d26cde89bd5eae559d9044e37b9
SHA512 8aeac9b8ae6a34be96b11abf8ceafb2934b758d5536cb0811097d82d34f56669d6f6e0497ed9e5e08321811274b4b693e9e656c8fc3d9ba130bda4ba01ff7ad3
SSDEEP 1536:OYNrqMxK+hGnYYN0KTxpueURPGsTT8qQjzdKGsdwB/yYc9RDJdK:OYNr/zQP2dRuGGzdxyYc9LdK
TLSH
T1F0931285C96D63590316CCE7C5BFBE0D8692BF313AB6A306DE221745443B2997E02FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 208KB
SHA256 1a7600cc4e1f552f98cbcb0a3e21ed0fc84764fa4b41d9ddfb23848d7aaeae49
MD5 2b5dc6050ce390e05fe5e53fc31afd67
SHA1 d799f2f1f4583a52c4eec8a7ab260e8043073004
SHA512 6a7fcf2ecd9f1f8d9085377081e4d03153616f3281b7614972accb760793fcdb716512dd527fc1e2db9b6930ee6a1389f76b0ab78c6231e44f26ea76256081b5
SSDEEP 6144:ZOnBadt7q1E8JxfrDdEdIEuzQAnkruEwjqMdT3VDI:ZOK78rudInZGOT3VDI
TLSH
T16C242318B2294FA7FEFB1D4189C59DFCF30850BF2C8E355A784D8B22B4D49871C48A69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 32KB
SHA256 e2c53a304b0ee1899f65860d47e1de27517ab1240fc2187acabcbdfbde576be9
MD5 0209338cefaa32b3b72cbf1162c6f705
SHA1 35a0b4292aa075765e1229dd5b097ed4fd52869f
SHA512 b08f034ebe81412ed1004c76b000cc04e442023e7faf36aba7e8b24bb7f0a763c3cf5031a63c9b64a8daf21ee746315e6dd319c59495518635c5408f0d04eba1
SSDEEP 768:rhp2dE4BrOvXduJ8pjtlcBvhOMsamG5OQ6sE4x:IEMIduJqXcB0M/5ONX4x
TLSH
T153E2F2B31ED14588D9A46BF0467C4F28DFC401328573B8BBE2CE8ECD179643B952D899
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 91KB
SHA256 f0b83e858cbbb6d1ad92d7c4c2b885ab6e3eb23dfb0281caa3afd3ec7d37a333
MD5 0dfc8a484c07377b72e01c9d04a146d4
SHA1 570d51474bfaa8c19591de4aec871a8347e0eeef
SHA512 886ae2ac0fe836e74e8b456ddcc3ca8d4721f71e1814281818da278424840b86cfaa2e25783f9866ac5d337068f90b7127890644fbc6028a06a2934cabb3c695
SSDEEP 1536:gc+iJ0+0QOUE41axRxmeYvDjz+yGfwHscaNtLUaof5ciskVFp00VPp5jf+eV3AU3:gWz0Q3YubjJqgsbtLUdRvVb0wme5AUvv
TLSH
T10A93127ADC5E631C9718E71C9E31B822248CFB6F3D866953F4A1D9193625EB3700236E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000084

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
Size 125KB
SHA256 d38e8ecd7f2928b1bced8506abce229c5eeaaf85ed2432d955a751fa3f889b39
MD5 2ff43112debb6f011c794d9f3dbb5352
SHA1 3e6258df6ab455b5794a7b659a397731d9b6c4ac
SHA512 46b2d95664f253c205c9e3df6535a4ed22728a774ec5f3ffcfb7ac58f86a1d4c220d07b119e3b1f421e34d1b1f0c178c1f19d26296c038b143d047a661c4527d
SSDEEP 3072:/GzQKVh1BAdDVzCe4YxUDkxB6gIaQ2fXAcbQ4dST/rab0X:/G8+h1BAdRzCe4NDk72aQ2fXAcbQ4ka0
TLSH
T17FC3126D575D1ACACCE4106ACDA1C04C3BACC7C4D6180AD6A9BF19809B7634DDE8ABC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 1024KB
SHA256 cd07201c70b829e5f731523539c3d9f16f445b252b16103009fb41d86ee45a9f
MD5 2b96378d9d36592b503e03d7f72c50ca
SHA1 8f5d94fdf74d3a2d187eb2721d15cd5e3845cc9e
SHA512 60b3870a4625ae5fde7097a7bf8304652f67d5da6df81afc5991981e6b6d737bcbbdb5266c7a74459cd284c7f33a545020e1f81f32e3e624e3049da022b0310b
SSDEEP 24576:BZa+T3YUy7G6gRon7KE8SzQE//LDYJn5Mw1p8HYiI0:BJT3YUya9RX5SzQcDy5Mw1p8He0
TLSH
T1A4253317AA0FD0D9CB3D2A78C0C5F7935D3611B1A91D55AB4B12EEB1C5F3A50AE13402
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 47KB
SHA256 ba9426365ba32f21031bcbca66c48e15e284f18d7151ccc8e61e2d58897333c6
MD5 9153ba32550fc90bca2141fea49c0989
SHA1 23614fe627e15d25c3d9d360ed2c97655832e712
SHA512 6843f054a5f2242c8d96511c3bebf5200151e39427c88f60c00f668e4d0126c9f6278182127f0ebd4f882bd6819b2a4745503915361adb7fdcfee4e4cd92974c
SSDEEP 768:oRrK09d2CK3VWTKPKYcllFslhYgvF0+cCNG3xwk5QhYXaa8m7N7TRHkSsoJvSD:U7RKaKPKllFMYgvu6s3xMahpRkSMD
TLSH
T18023F24E6ADDDBAFFB50EA2017C401E8A561C12EC117D6F470D25768FA8ABC4E448B25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 19KB
SHA256 af4c77a1736da7f286323da682b83d8871291cdb1e6a5fe461204dfe0655c9a8
MD5 453dafb480f80e89e8e56ede252540ee
SHA1 80f81c65fd08862e17208ad851b844fcc30b5ed7
SHA512 f9e03b531c950b1492e65303b77fe19b2ef17337c3347b71afd5f0bd6a1abe6a4536823a208c211b5314fd2eae40f0066957da931efd368735796afb78af2a31
SSDEEP 384:Nnfh/8wpxdss9QyEcaZ2DskzqKrXYsQnt8I57hrFZsyCwAD4YctWQ:N5Z7dsYQ7caZ2V/LG5HnAD40Q
TLSH
T13E92D0862425C710F5D47D64728EA4BE87788609B6B2863BEBFE7C3D6845CA11D85F03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 39KB
SHA256 456921cf31088fb7403613025659f09da1a9e5dee86b677e4e1442edd2992ddd
MD5 4e069246d7df63042fe175678d5f2312
SHA1 e2faf4b21425956facacd56868a3f8c012af912e
SHA512 8eaaca445c8f716b7c5ab14df512270be60f22747445296f9bea134554d33222b8c153bbc7b77e94068fed3ed05e552508e6c1ae84a53084169fee9cd6f37446
SSDEEP 768:Zw7i+/DSd8qxs5SOxiM4owQ+ULus7k+N00C06QgQE4uFdFx0dQgXAx/pC9:Z8u84QSOxcQtpIqo10dQgQxo9
TLSH
T1BB03F2BABA520639F5E20388FDB84CCCF9BA0D00454EDD7334E859762D6A43E87151EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ab

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
Size 29KB
SHA256 108df5a473554dc60269837e1217e5ebf4ded96b8406ac21c3d1f6eb8e6dbf4f
MD5 4425ed1cf53ca980d6b94b15a6dd116b
SHA1 a1d91d0a0c81e3dd4c81a3bd240ed766c9974881
SHA512 cbba738cf27328fe6f2989f62f72ef60b3f4f3ebe8c1ed9204819e45162a2f3a7d4bdef280ded86cf64081d1055616539eb53ff73e25f2b8d4bae8abd6f548f6
SSDEEP 768:iJSo5HqPA7yo/vnwVqjysiLn/Vl88V0knkQt6x:ip5HqOGsiL/3Nfrt6x
TLSH
T1B1D2E05AD7FC0B84D07A062C99D0576F4A7921DBD3D321AA7D315BB8AB03632E327235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ad

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
Size 131KB
SHA256 463503a7f9a633cc43fad631d1cf3d1fb28234dc1c72888fce099e00187bb910
MD5 0f2cff4cbb1a43b1ff04aaa226fe0104
SHA1 34afee7a1d73710e8734f00f20e5532ebfb60ae4
SHA512 2f000ac7bf1f5049ff5c6f2ad16c88f9a47a05850cd4445678eafa43ba430487180067e480cd6e27e5159809c2bb9387a1b8a85c98176dcb1fbb7b81d18d427b
SSDEEP 3072:+a60JKS0LJCeDHdDLbbZDxmT8KkYCy4ROni3cIc+hHA6kdTqqNa:+F0JKvL9ZvFkI1G4Ai3cVsHA6DqNa
TLSH
T1FBD31279DD2B0842612D9AB7B6378BE172841BB1B5C94E794F2380B36658F1F219CF31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
Size 22KB
SHA256 1884bb49a613c9a38d29ac0c09b5512a436614320e3b295e1216e91536da4a06
MD5 6cf8339103abe8846e3818d9eef6c1db
SHA1 d81ad2723d2e7bbcc20824d9be34cf9b70ec3c97
SHA512 7c01a0cfd6b22c0e40f9b5506eca8ed6734433b2afbf6b09eeb215eec581675ad95a1862a524e526661e695b6d7d7d2dbccb0090bc24cc2a15a390cd5823893f
SSDEEP 384:wAN8e6mjcyNNwXglZUNFNd9FfbOLoBbYAEemQNYB8O4r4sXKYB59P83yGsbSvBj7:wAN8enXiAUNFNdrSZAEebjO24svB59EZ
TLSH
T1E4A2E15795BBC41B4506BCDA360E66D35DAC6210D4F0E2EC6196C86E1D7372A00FB8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 59KB
SHA256 b18640b9db58252b3a28cbef34c188897d57f357ccd0d0cc27144afb43addc8f
MD5 14b40d05639bc2f1aabf9b316d7f090d
SHA1 1e0505c9b36f665945ad23addc8213a0ce19b707
SHA512 ee10e44eaadfc64c81e05ebe93aceca9fc43bb7d0a5c17905cc4e1de5a88cb187effdfd2eebedadbaa168ffc15b18b896c43c2fd0bfccc3c36068d75f45ce28b
SSDEEP 1536:JJSdtHWZ1FQ960qAGBLBOu7zepuYCOJ3TbEHJFcu8M:7S7+cGBPeuYKJPx
TLSH
T1EA5302137E578201E45A15FB7B064B3CEF9381219C3A1B1E85B735C2A848F8D96F1B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
Size 22KB
SHA256 1509c5cb5c62dc9a131a693c56684498ac14ac118b563f3020318ee790b472eb
MD5 ee0b6f83ae50f3cef52f884ee6f7332c
SHA1 3b34045397b71682c33dc0764cb0deca2d09b4c8
SHA512 9135df7c355b319bf21611524e23c401b7c250f083a45ca86f3835e76da1b12aadbda226e333a9632b8200e6bd2f51562acf4742d22fe884a476a55d1c068d7a
SSDEEP 384:rC0PS6+iunYW9kuqUpbu/9baSgo1+lW59uVCULhZ12FU8ZF631K6MWQc2OTNHd:uyv+TSa7E9ythch4hQtOL
TLSH
T14AA2E17366002F17FA2A4E7635E2C94F9283C90452F1D0F2178159E55D769EDF4F8E28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000bc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
Size 37KB
SHA256 72f9889deaa066466980fa91492424dee0ab73cae59d9b16cb7c826607580efd
MD5 ac80321d81b8de903eafadcbec0c4b45
SHA1 5722ad1864c91d2494b212b68221b78ea4b54fa0
SHA512 2b27e6c506970a8da697d53153b07e9bd5c6e32449d272edf96c84b7e6a76913dcd015fe9349e69d997af0256c0c2154864961c746e97bcec38e30f7ca37e21e
SSDEEP 768:8cskFiMCBGLSfDr2x2XKowx8CF38ZmambYHbg7yZ:8u4MClrqxzxJ3Tf8HbgeZ
TLSH
T1E603F2CE417B781F890F2E34A1F76842C5B9679AD804CFCF2E54A4F246BC4624074F9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 8KB
SHA256 78e5da19ad045a9e6bbb68a4f0735d2f10d7ccd2ad8fd80ca38edaefeb615444
MD5 5aedcffc854886ca40b94b6eebfc6ca7
SHA1 0de09be68b20f9c955aba0de3620cf39f6da8c94
SHA512 c8f99cae3027cb4c7443c55d0ea19c6e2efdfdc419c2ae66baad17475bacf7d75d8f821a5342e588792c8b7778d667392f88d2a61c44ddabcc88e92d316b6fec
SSDEEP 96:p+i5m1YkAMkgKA6IswuNl/zKUdosXzUE8IZ5fyMAeVDu9r0+3iC:pzmP0DlNFzzpoIZEMAftFiC
TLSH
T188023E842AFD249ACF924D7602D75E8572F158D9ACA31FE70A881E35405FFE4E9C031E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xnxx.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 15KB
SHA256 b73dca07175b7ea7e507d05961830fe0698c0e0a5a30ead4d65ee1c738d73fad
MD5 5cefc647fd8244571cc57a8dcce2089c
SHA1 71aaac930e159d3aa3d506351a8009f8c56f07f0
SHA512 102f31ba7bb90d308ce6e1f975db9b8c30e9d6953d99a1d65f0fa05e2b4e139caddb2ddf97e0be5148396e4052f66799c679a40f0ea0b85a31f50ffaac7f3057
SSDEEP 384:DaMzsVaT79Q14OleIYk35GraZVyFdWa81bYOwD4UeAgHV45t6tmqD2It2vQ7mKeQ:HUbxnkoP
TLSH
T1BE72BDF383E4862DDD2156F4AB146E1BCE6D0925432C3C6A88E5BF1B53E2572E241B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 3e774f4261777095c1d7ab13345c38f6d696596dd540fb597274597a6d87882c
MD5 88af50b9736e75a18bc4011ff9a0ff38
SHA1 94e140583da0edade03d59f9fec04f4f152c072f
SHA512 d24212642327882bcc92a57326cea14bec7c82033ac1cf1f6c7a30a3688638122e67c9aa7d2f8c5135831fdc928588fd4d1d2eb4f7af9137202ca87babaa899e
SSDEEP 384:DaMzsVaT79Q14OleIYk35GPRaZTFdWa1bYOwD4UeAgHV45t6tmqD2It2vQ7mKe3d:H4bxG/dlEUr
TLSH
T1C982DDF383E4862DDD1156F4AB146E1BCE6D0825432C3C6A88D5BF1B53E2572E241B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 97fba7535bdad53fc85c6119a496197a98a8226f6c4a6f391390662f4e05697e
MD5 c9e875b6bf59e83d2082d3089caa931b
SHA1 ffda09bcaa32a246bbd9e227de494b373191d460
SHA512 76d4e381ed07eac35e1cb5d9c8a5178330232cd87e4484f6e122bd9d31b64532e64eb41c4c13a2ed49f550a2858313e0528f996db3514a9f86d839865be4fab6
SSDEEP 384:sxRHjqBZ/fNsKtkMBx0DQkS/5H2hK8hZy9cSFA:sbeBZ/fht3BS0T/5+y9cSK
TLSH
T12682F843A5345E778DDEE118F950FB27D2F610A2A1D04E95AAFDDA1C00E6BEC710281F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 37da33b19fa87d7ddad0eddbd9f1e8c69a9fe596747129619184ddc663b010f2
MD5 579a2c7162e271b6912e75e8ae19c79d
SHA1 22c408c1a40733e70bd6cc5f84fbbd3f1779bee9
SHA512 11ce1cdd0525bdf7aad5a75f462bf0fedc3d1ef0fbdd6b66f5127e9e41ed300557dfc51a4bbcba8e94ce17920c6b57e90448cb2930ccfb0f370e03278465eb19
SSDEEP 192:sxRMR5yM/jK1Ml8wCZ/fNsgsKCA94/dzoA8pLXXmE9NiuJ6/g6+WN0pHBnsZYD9M:sxRMR8Z/fNsgsZ8Fzy/52WZrSFg
TLSH
T164620B0266345E7B8DDFE219F951BF53D2F91073A1901E58AAFCDA1C04E6AEC620381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 0df39df7eb5b155506ada6e3375a1366602d6488c4b8e028ca411af1eaa7d411
MD5 216b0c0d500d7fe474c799910d2ef33f
SHA1 12e4f364ef809355b93cd5f0009e4e3906d1fa2c
SHA512 09e25b0d0b8bb0ad7b087d18fbdbe700d134239291e8cf7bb5c5c384251134e8e7263828ca157d1d46fbd7de78b1115d78fa5ad307b83fa1535ea86cd24a0400
SSDEEP 384:sxRHj8Z/fNsKtkMBx0DGkS/5HWA8hZZ9SFe:sbAZ/fht3BSyT/5yZ9S4
TLSH
T10A82FA4365345E778DDEE218F911FB27D3F610A2A1904E99AAFDDA1C00E6BEC711281F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 0db48b9c27809dc1b6cd4d4a642def2716ccf3e997f145d4bfeb1fbd43d4b17c
MD5 d8beaaf9a5b7d685e18bd64dea0cfd5c
SHA1 ef6516109dd7bccb3533765aa6c3bc724aec4e50
SHA512 2441cc11eb914ee81ec58d4fe8150f0706bd3af9ce2bbc4937672a6db3244e19d4175e868e4858da2893e4ffe777914c42979375c826fae5d8f37071ad679ef1
SSDEEP 192:sxRHR5yM/jK1Ml8wCZ/fNsKsKCA94/yzoA8pPPTw65qumE9NuSrJ6/g6+WN0H0h1:sxRHR8Z/fNsKsZ8O17Q/5H2Z+pSFE
TLSH
T12A72FA0265345E778DDFE219F551FB67D2F91063A1900E98AAFCDA0C04E6BEC621381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 6d39d016bf883055b23a837d00a73c0feacb19998692f04620591a52feac2386
MD5 db82caa0a35423d2286be4829f2f6a77
SHA1 1f8ce606a5b0e3a1b2c87e704f57098b83691bf5
SHA512 fe0961f1660b3d40ee2b928fe5106b4c8ded499977c36140a8e369c99d23b5f8a1ad1f684a0c4fbe7e3124ce6188daa81d742ef831f3b567cdf77d81bf7de8c7
SSDEEP 768:aW5WKL7pLuL710Wg/XfCf8F1+UoAYDCx9Tuqh0VfUC9xbog/OVvc1svro/MVRxS:aW5WKdE710Wg/XfCfu1jasys8/MA
TLSH
T1F8E2FB3B280CCB7E4F444A9DAD297D9BADA801CB96DCCD5447EA840C03C6BEB56164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0f946d5117baa979550aab5459a51a5bc4b578316d611bd724e05106dc3073f2
MD5 18099fad6ffeecabfb39baa1fe1cb3ee
SHA1 8cdc1c3f7ef6b9915b882886c9d48c651a4c04a2
SHA512 583804f84dcda9e9e7b3d632fdd3d437627f2fe54d8e52d9d261a3ce47ef8a14b1538a621cf458bde260d13554b74f650fcfbf4638938bf496fc28493e97eab4
SSDEEP 96:KRLURlTp5FWtC4gNFK40gjFcrzKtZ+H8B8+8P8r8Z878/8LW8P8M86g8T8LK48yw:CLURlTp5wtCZNv0gjarzKtZ+HYp8IamF
TLSH
T1CD913820727E0241397E6608C0A5992B958278E135ADE92F7BAC91971F77F028DFC8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a3653.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a3653.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 45KB
SHA256 6075d5cdf5b61e20d7aadc5dabf3c947e18ba3c34b935c9b0eada68709c192dd
MD5 73f50a3bfb02b7218b2e9d5d6a0db505
SHA1 320e3c8457852fd8bc5306cfdeacb7dbedf04307
SHA512 926eb9129164097d37d99816505c5f47e0aa60c77fdc825ed2a4c59f876e5038b7eee60475a34262e97520110964912f487a8ac049b9d34e3d145ec520d0105e
SSDEEP 768:iF0rv+4UNbdk3LwgcsEsmrEnjN3Gac1FkojKgqmU6Z:Dbsbq32MmQnjMajfgRUk
TLSH
T19823AF35D868DE779CFBA7C2B246BA43AFE0159384C58AE4DAC96D4C00875DD130BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 6ff08d5ef6f3530c47aafd18b45127653c3d145656ad53076e58b932a87d0595
MD5 e05a5bbf8d6fa83853cc837f3a241578
SHA1 b09c4b7e75c02e5f0ca405eb202daec79ce0c0e4
SHA512 f7b4b55a445e862f12f6f3274afda47f5742e6b9532f3cdf51080f63b0f3d764f6fba1cff2721368fb4a97dc689f7fa3aaef4ab8629f2c41216e5522165f3cba
SSDEEP 768:Irv+4UNbdS3wsvi03rEnjN3Gac1FkojKgqmU6Z:Ibsbg3wG3QnjMajfgRUk
TLSH
T17E13BE306469DEB38CEAF285B143BA43BFF4159384D14BB4DAC9AA0D05875ED270F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 5b3b33487ff3c65cd7838751925f9bcfd4d5a41bc2341e6626b0f44b6a1e6eee
MD5 779746c4322042290e84a6bda12969c5
SHA1 495c60f2d4b7b5fcd70986983138e9ce267e902d
SHA512 7dd00872b63e48f28709e4aa7f6c246524b239570229c7005e164a4c608a059586a7e2ab71f10a5b276facdc318bc6292930ca7cc507b4bcc5f9a2d5446a548a
SSDEEP 768:rrv+4UNbdS3pmi0TrEnjN3Gac1ZleVH1SCz:rbsbg3OTQnjMayEH1V
TLSH
T12C03BE3669B88EB38CEBA38571877A037EF4525385940BE4C9CD6B0D069B5EC130BD67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 9f8c291633ba2b692d50538e09360cab269c4d4b548ed7ef5a208b4ddf87d975
MD5 a3160bcb37a04cf2aa4507eb6b4551bc
SHA1 00d4bdeabb21a04e164f483f52db50139f6b7154
SHA512 dc9b575693716c0277f67d6382e55a28b9520ea4866fc08a914c7d46d6bf5b7f07108c6af2bdd71e51e94cc49f9e4af08559303f37bf1918a6c7c99a422517d0
SSDEEP 768:Zrv+4UNbdS3Bzi0+rEnjN3Gac1FkeVH1SC8:Zbsbg3H+QnjMajEH12
TLSH
T1D703BF3169B89E738CEBA385B18776437FB416A384950FA4C9C96B0D06875E8230FD37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 97db51d08bbb7c3ed98d9333519a578aa02600ada89f8d1fe4c9c9b513490daa
MD5 89d4535bc3656959b3d22adda137c8c5
SHA1 029a896fab29c35600279ad14efcdc0e08ebe774
SHA512 6d93f275feab85f4e85da65f495aa7e61686de0bf22141e8c4d6bb39a8300b4616c817e7303b888a299b6d127403e2253e4995583faf03c7676b7da170c6d8cb
SSDEEP 384:zesrv+89zHqlDNP9oidS38NQqUZqSi/MWZlf8hyEGUi7FrAsy2rEoajo4cdR8eHh:lrv+4UNbdS3RKli03rEnjN3Gac1FkS
TLSH
T14603BE307978DDB38CEBE385B1477A43BFB416A384D50AA4DAC96A0C05875E9270F827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 64fca1b55b987d7714351ef2d80baf97928433f732613eb0a0f79e02210542c5
MD5 1eda8df5e3510d855c7c52da8f4e00ea
SHA1 259ad1c2653771218f3a99718a3763883e53b1dc
SHA512 5bfeae6ed9b7a8b60bcf7b63169913fa0dc236c9dc8d8ae16695197f981287cd318e59d2dfa001c611dc2ca4f2a473f5700518bf667c01a5c8cd90d5f946b692
SSDEEP 384:nesrv+89zHqlDNP9oidS38NQiUZqSiG2WZlf8hyEGUi7FrAsy2rEoajo4cdR8eHh:Jrv+4UNbdS39/Hi03rEnjN3Gac1FkS
TLSH
T1BE03BF306978DDB38CEBE385B1477A43BFB416A384D50BA4DAC96A0C05875E9270FD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

28d57a2c-fa17-49a6-92c4-9924546c367f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\28d57a2c-fa17-49a6-92c4-9924546c367f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
MD5 ae3a19c226264ff6cb64877f1e7e7243
SHA1 f993431dbd09200fd92b7a04ee6711a54ad95cc9
SHA512 97e5dbf0663585afbb5e0f2b5a36192624eb2c898462abef65225987df632d30f74f05ac5a71175c4c59f75d9ae6d2e640d168e479cb26b9a6857c71efda029a
TLSH
T1C1C02B85CB1E0C854E78153D48420B2727819F0030508534445A490C41741CE00888CF
MD5 SHA1 SHA512 TLSH

Submit Download

00c67738-8e8b-4c9f-9181-d796d75df9a5.tmp

Path C:\Users\Admin\AppData\Local\Temp\00c67738-8e8b-4c9f-9181-d796d75df9a5.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4816_1304799088\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1200-992-0x00007FF74AA00000-0x00007FF74AA1D000-memory.dmp

Download

memory/1200-422-0x00007FF74AA00000-0x00007FF74AA1D000-memory.dmp

Download

memory/1200-1130-0x00007FF74AA00000-0x00007FF74AA1D000-memory.dmp

Download

memory/4472-886-0x00000207D1000000-0x00000207D13BB000-memory.dmp

Download

memory/4472-1645-0x00000207D1000000-0x00000207D13BB000-memory.dmp

Download