Analysis

  • user interaction
    yes
  • max time kernel
    295s
  • max time network
    295s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    08/08/2026, 19:53

General

  • Target
    https://workupload.com/file/3YjsfVMKNhx
  • Sample260808-ymemjatejf

Malware Config

Signatures

  • Family: salatstealer

    SalatStealer is a stealer that takes sceenshot written in Golang.

  • Detect SalatStealer payload 12 IoCs
  • Downloads MZ/PE file 3 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 11 IoCs
  • Loads dropped DLL 13 IoCs
  • Modifies system executable filetype association 2 TTPs 8 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Unsecured Credentials: Credentials In Files 1 TTPs

    Steal credentials from unsecured files.

  • Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Probable phishing domain 1 TTPs 1 IoCs
  • UPX packed file 17 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 5 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://workupload.com/file/3YjsfVMKNhx
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffff807c188,0x7ffff807c194,0x7ffff807c1a0
      2⤵
        PID:3916
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,1205796325140627337,2397741120233049438,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:8
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,17747529574534886994,4420993777025482155,262144 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
        2⤵
          PID:4576
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,12341031949574364036,13298843961302356984,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
          2⤵
            PID:3736
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15895081052172276858,8260266071351371294,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
            2⤵
              PID:676
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,1414025251135773727,7938065881556572356,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
              2⤵
                PID:2800
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,16079737546587645322,14250254815536669114,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
                2⤵
                  PID:2588
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,10193464810967518114,11924053257677425977,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:2
                  2⤵
                    PID:3464
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,12744101437181002061,13022727539590515643,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
                    2⤵
                      PID:4272
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,4378567605582593287,8547829440298819249,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
                      2⤵
                        PID:4016
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,6987208902483626173,955865687798551744,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
                        2⤵
                          PID:3316
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,6987208902483626173,955865687798551744,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
                          2⤵
                            PID:3632
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6212,i,3293886996868102323,12445873503141737335,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:1
                            2⤵
                              PID:2344
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6388,i,12074970077163417760,9749556627655696062,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:1
                              2⤵
                                PID:4948
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6556,i,4714686282909097093,545482036256392159,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:1
                                2⤵
                                  PID:5044
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6668,i,15817817535708410345,11167089189116714918,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:1
                                  2⤵
                                    PID:4396
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6864,i,172131970243902176,3229749841541649618,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1
                                    2⤵
                                      PID:2832
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4504,i,10370018370229423529,17250706492299726446,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:1
                                      2⤵
                                        PID:2920
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,6810688715940637257,12162530580146678415,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=7320 /prefetch:8
                                        2⤵
                                          PID:2612
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4556,i,14789055514317849681,6726999102899763745,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:1
                                          2⤵
                                            PID:1436
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4508,i,15528316015486492785,5359146010538375426,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
                                            2⤵
                                              PID:812
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6248,i,13387435467586660308,20128499328876126,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:1
                                              2⤵
                                                PID:1988
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7576,i,7294979607760450162,7851375863012904928,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
                                                2⤵
                                                  PID:4844
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7572,i,15322687411829186823,5973674478707674416,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:1
                                                  2⤵
                                                    PID:3268
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6664,i,14803325637265541015,6378480730550416197,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=6936 /prefetch:8
                                                    2⤵
                                                      PID:1528
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6948,i,14864812413536240874,13549891814432580368,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:8
                                                      2⤵
                                                        PID:1508
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6960,i,18012459737559188367,13580462372497686863,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=6904 /prefetch:8
                                                        2⤵
                                                          PID:1764
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6564,i,3525180398428188782,16658839290513432954,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:1
                                                          2⤵
                                                            PID:2364
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4508,i,9376565731101924061,39114202719277336,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
                                                            2⤵
                                                              PID:3296
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6356,i,5101554493745183781,1789060781534336728,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:1
                                                              2⤵
                                                                PID:832
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7116,i,2194653121929235248,15273113809693442616,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:1
                                                                2⤵
                                                                  PID:1980
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7824,i,4452023829218284874,18357537643470392874,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=7840 /prefetch:1
                                                                  2⤵
                                                                    PID:3116
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7972,i,3286461628781605563,16269904869951757716,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=7988 /prefetch:1
                                                                    2⤵
                                                                      PID:3704
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8120,i,198993136019210388,9696479539180465479,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8128 /prefetch:1
                                                                      2⤵
                                                                        PID:1508
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8272,i,16603418768532759423,14372499557298015851,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8284 /prefetch:1
                                                                        2⤵
                                                                          PID:2296
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8352,i,10741079014301719870,16890147560002948216,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8356 /prefetch:1
                                                                          2⤵
                                                                            PID:1528
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8328,i,6695307386672195969,6136258672997562628,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8304 /prefetch:1
                                                                            2⤵
                                                                              PID:1092
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8588,i,12252931248845678648,13010650505450498222,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8744 /prefetch:1
                                                                              2⤵
                                                                                PID:4960
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8480,i,17287869040243285692,11817609149426315724,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8352 /prefetch:1
                                                                                2⤵
                                                                                  PID:5200
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8904,i,7859644661473218255,11214399160697098895,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8928 /prefetch:1
                                                                                  2⤵
                                                                                    PID:5452
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8784,i,6454606735441051187,14203819653891532305,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8468 /prefetch:1
                                                                                    2⤵
                                                                                      PID:6012
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=8876,i,5878204263096393949,18428303175194537446,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=7100 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5188
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8820,i,9102322812746901079,1315302739003180510,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:1
                                                                                        2⤵
                                                                                          PID:5220
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9048,i,9279305845548165396,15784232530976661249,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8764 /prefetch:1
                                                                                          2⤵
                                                                                            PID:5280
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8804,i,18321311039826520995,13392128100713860116,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8736 /prefetch:1
                                                                                            2⤵
                                                                                              PID:5324
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=8664,i,4222649687650116807,10952576504985348050,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8620 /prefetch:1
                                                                                              2⤵
                                                                                                PID:5480
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8092,i,9508651251979192222,234606382491754433,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8652 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:5512
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8416,i,11294177954657763781,3588902933157925461,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8148 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5664
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8228,i,7989321255708186281,17917005695655307517,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8156 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:5672
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7104,i,8735136014828215868,14183263438946771276,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8700 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:5820
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=8228,i,6135212400827601289,3386831579612656942,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9328 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:3116
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=9444,i,12960403990246013042,10836803668235236677,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9448 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:1508
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9616,i,13152709266681990667,3824171994983943062,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9612 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:4632
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9780,i,6873989588230072436,3733840694388563604,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9824 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:6084
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=9900,i,7434897557057296277,3429700618275030117,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9916 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:6092
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=10108,i,11278192206052039392,1803080003386525030,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10080 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:3504
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=10280,i,2693842570763510932,8141447374778906795,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10260 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:5508
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=10412,i,16539500948052735375,17725579192210942969,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10084 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:5776
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10572,i,11868381099488224270,6539364347936792894,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10548 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:1384
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=10684,i,15524890895915164237,3980464989155712333,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10696 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:6032
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=10280,i,562968802083569550,3547714626594173567,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10304 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:6164
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=11040,i,894228050918340033,1625501098816943284,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10136 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:6256
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=11152,i,16024233812162557693,16479839763731112764,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11120 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:6356
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=11268,i,14128845213026589389,6462796402432925974,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11280 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:6364
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=11428,i,16589922330967073416,10740428209180815046,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11424 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:6372
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=11560,i,4594869838627550949,9018486766922920603,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11568 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:6380
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=11080,i,16576474423928284431,15668255020377522067,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11808 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:6620
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=11932,i,4640161884463260248,14649163637804597381,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12052 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:6684
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=11984,i,4720663131744129621,1544745120263596962,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12192 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:6740
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=11936,i,17855973498131023176,15891205391220386250,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12356 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:6848
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=12404,i,12044320172823863630,10733819176641300164,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12416 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:6904
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=12272,i,5172013171167853285,16425562327540748137,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12556 /prefetch:1
                                                                                                                                                  2⤵
                                                                                                                                                    PID:7048
                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=12560,i,17110851517530646945,2734006501990761643,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12692 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:7056
                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=12344,i,17122410315454052331,13098425397997174436,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12248 /prefetch:1
                                                                                                                                                      2⤵
                                                                                                                                                        PID:3892
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12240,i,6653167241377257109,17210392013370504778,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12336 /prefetch:8
                                                                                                                                                        2⤵
                                                                                                                                                          PID:1060
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=8460,i,1843597682652617459,3103083284462814601,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10368 /prefetch:1
                                                                                                                                                          2⤵
                                                                                                                                                            PID:3036
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=12236,i,9818923248577955517,2109445908822066727,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9304 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:2916
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=12284,i,17068520382545604979,18014167938440869531,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11444 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:6840
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=11560,i,10416467962761296016,8911442587903889301,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11948 /prefetch:1
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:1696
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=11628,i,3143557375596565926,2918183968149170700,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11604 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:6964
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=10804,i,17203355366416492103,15557366613543235909,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12012 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:6976
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=10132,i,6615532642207851903,15557398787769339386,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10124 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:6992
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=10160,i,16841926754619770385,17821961238320800564,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8080 /prefetch:1
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:7012
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=12244,i,14084328613054437596,14023393789039885368,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12064 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:7024
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=12352,i,16801145438980570016,545444139972333148,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12164 /prefetch:1
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:7044
                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=10288,i,8787351523706418713,2516480393814156492,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8096 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:7120
                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=8048,i,13682060408058434665,13349806510020773789,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8016 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:7136
                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=8440,i,2155633258282248861,11536202319693376455,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8144 /prefetch:1
                                                                                                                                                                                  2⤵
                                                                                                                                                                                    PID:5576
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=11972,i,13667191529130250730,3427833196229579120,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12972 /prefetch:1
                                                                                                                                                                                    2⤵
                                                                                                                                                                                      PID:5524
                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=12056,i,8487521324839761210,4512479865038249362,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=13124 /prefetch:1
                                                                                                                                                                                      2⤵
                                                                                                                                                                                        PID:5572
                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=13220,i,2358075255573817582,1497938186583502201,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=13252 /prefetch:1
                                                                                                                                                                                        2⤵
                                                                                                                                                                                          PID:5584
                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=13384,i,644809587490208735,9761469494726944330,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=13388 /prefetch:1
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:5604
                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=12216,i,12668862291492270530,16913340714934273065,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=7928 /prefetch:1
                                                                                                                                                                                            2⤵
                                                                                                                                                                                              PID:5544
                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=13620,i,8184685088332391133,8581831548815919164,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=13648 /prefetch:1
                                                                                                                                                                                              2⤵
                                                                                                                                                                                                PID:2644
                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=13692,i,6284497174525342643,12941891899673746418,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12344 /prefetch:1
                                                                                                                                                                                                2⤵
                                                                                                                                                                                                  PID:6088
                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=13892,i,14186892657347382841,9191496138381184904,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=13888 /prefetch:1
                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                    PID:3464
                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=14032,i,1151213034928688555,6071017787193913931,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=14048 /prefetch:1
                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                      PID:3284
                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=10924,i,1229416869650317338,12112928888440479906,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8680 /prefetch:1
                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                        PID:4748
                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=11992,i,1104415798654865527,15014727446522049192,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12168 /prefetch:1
                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                          PID:4100
                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=11704,i,5768288657871138777,4850527620198529813,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12008 /prefetch:1
                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                            PID:5848
                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=11444,i,13907767377218504803,319942612936629057,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=13508 /prefetch:1
                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                              PID:5844
                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=10324,i,13538892053753016280,321447357350270152,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10128 /prefetch:1
                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                PID:5872
                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=12164,i,10255926426941078401,9870325059956222972,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11584 /prefetch:1
                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                  PID:5840
                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=13936,i,2092358421721850048,16468616558885963365,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=13872 /prefetch:1
                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                    PID:5876
                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=7916,i,13376138221700155982,9874712054523078161,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=7948 /prefetch:1
                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                      PID:5880
                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=11640,i,7421342824673932665,14483288053198250908,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11644 /prefetch:1
                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                        PID:5480
                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=10204,i,2123278979428517056,8011894512978060571,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12708 /prefetch:1
                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                          PID:5684
                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=10132,i,12774184561908970786,8361392439827462070,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10296 /prefetch:1
                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                            PID:5704
                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7204,i,4314189426319121288,8916892819813874740,524288 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10816 /prefetch:8
                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                              PID:1032
                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=12780,i,15620250456200373102,6298755144904543668,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12692 /prefetch:1
                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                PID:3812
                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=8676,i,818103006739984548,284269798796124321,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=13728 /prefetch:1
                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                  PID:6740
                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=9556,i,12325501975029393725,4835290879456529324,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9460 /prefetch:1
                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                    PID:1976
                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=13264,i,2639017179248516825,2893637707847823470,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8644 /prefetch:1
                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                      PID:1620
                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=13260,i,10238697241360998229,16103960596338026534,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9052 /prefetch:1
                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                        PID:5680
                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=11760,i,12434879931517131055,2562849792096156062,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=12836 /prefetch:1
                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                          PID:5848
                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=12544,i,1305611621005804274,8767837326599245532,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8216 /prefetch:1
                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                            PID:4636
                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=2108,i,10672048402500209402,10883688677256004820,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9352 /prefetch:1
                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                              PID:4120
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=8896,i,16959977406386067337,17229560142337995370,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9512 /prefetch:1
                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                PID:7056
                                                                                                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=11060,i,8556852667811569138,10570951656085282383,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9656 /prefetch:1
                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                  PID:5696
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=8716,i,6087271358242699478,12606922226849610247,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=7176 /prefetch:1
                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                    PID:4900
                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=7836,i,12564153831979585743,14233061640932161465,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=8012 /prefetch:1
                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                      PID:5764
                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=7960,i,10826460545226320420,7639214703033775548,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=10584 /prefetch:1
                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                        PID:5744
                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=10568,i,13141970616054398816,11639219365853854002,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=11432 /prefetch:1
                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                          PID:4340
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=11540,i,17852653584340244771,16274115395977726340,2097152 --field-trial-handle=2428,i,1014393465541834404,3648177333029155530,262144 --variations-seed-version --mojo-platform-channel-handle=9756 /prefetch:1
                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                            PID:5824
                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                            PID:2764
                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                            • Checks SCSI registry key(s)
                                                                                                                                                                                                                                                            • Checks processor information in registry
                                                                                                                                                                                                                                                            • Enumerates system info in registry
                                                                                                                                                                                                                                                            • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                            • Modifies registry class
                                                                                                                                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                                            • Suspicious use of SendNotifyMessage
                                                                                                                                                                                                                                                            PID:5732
                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffff7cdc728,0x7ffff7cdc734,0x7ffff7cdc740
                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                PID:5860
                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,8827280864435147752,14633684528302771349,262144 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1936 /prefetch:2
                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                  PID:4844
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2288,i,55993564451167927,607317242299746608,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1876 /prefetch:3
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                  • Downloads MZ/PE file
                                                                                                                                                                                                                                                                  • System Time Discovery
                                                                                                                                                                                                                                                                  PID:5428
                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,12391637076090450851,9317447395206147177,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2484 /prefetch:8
                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                    PID:5272
                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3252,i,10210255810361484344,4292902122057152608,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3260 /prefetch:1
                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                      PID:5456
                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,13200713416662886257,8585840623862026763,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3276 /prefetch:1
                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                        PID:5476
                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4556,i,15893936796615924818,18234303916797789272,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4564 /prefetch:1
                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                          PID:5168
                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4684,i,7445647413554028674,17767202417913105232,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4708 /prefetch:8
                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                            PID:6064
                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,3476147309292683060,15895832348350858343,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5212 /prefetch:8
                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                              PID:6072
                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5456,i,12775827354067506982,8441746709248608536,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5484 /prefetch:8
                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                PID:5636
                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5684,i,14883603001572648071,15322409396880139204,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5692 /prefetch:1
                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                  PID:6484
                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,4779748313641966620,2691361785948071224,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5568 /prefetch:8
                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                    PID:5400
                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5616,i,9807618706324623037,5399566138217022061,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5440 /prefetch:8
                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                      PID:5736
                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=3408,i,170067478459107595,14910469673324613365,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3460 /prefetch:2
                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                        PID:3952
                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3308,i,820807319658469403,7322497140086038430,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3304 /prefetch:1
                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                          PID:4836
                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5760,i,14780541848610697274,182132547222323488,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:1
                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                            PID:1460
                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5776,i,2262360478000909365,17778968447499554564,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3980 /prefetch:1
                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                              PID:808
                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5912,i,13256750248103460036,3670092953108038211,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3404 /prefetch:8
                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                PID:2972
                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5876,i,8639646173085847954,13556702226364184397,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3524 /prefetch:1
                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                  PID:6072
                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=4628,i,12346245593340866672,6239442188704372751,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5396 /prefetch:1
                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                    PID:6740
                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3980,i,2265421424334741997,1995319071889391348,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:8
                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                      PID:5740
                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5824,i,10312689881424214745,14311603530422019260,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5804 /prefetch:8
                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                        PID:4340
                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4648,i,10102043591509602590,8766454196192049979,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5876 /prefetch:8
                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                          PID:4900
                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6028,i,10409313511442573609,14011301797371480910,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5444 /prefetch:1
                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                            PID:4052
                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6068,i,6262325845076180731,9221591693339407811,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5872 /prefetch:8
                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                              PID:5704
                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=4612,i,4070053535218809950,13328194736734154247,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4536 /prefetch:1
                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                PID:6032
                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6044,i,10688756160463754852,11270785392717996741,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5672 /prefetch:1
                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                  PID:5056
                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=3284,i,532285287589845142,11106783006068328913,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5976 /prefetch:1
                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                    PID:4132
                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=3416,i,4984441705183480007,7677622836436321131,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3420 /prefetch:1
                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                      PID:368
                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6208,i,6793478482448322167,18035002461135173982,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6176 /prefetch:1
                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                        PID:1676
                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6332,i,18381731783016501638,1550373898237182613,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6320 /prefetch:1
                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                          PID:4124
                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6504,i,8464430528510392463,592172881865361093,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6480 /prefetch:1
                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                            PID:7132
                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --metrics-shmem-handle=6460,i,16919884072217052752,5636350373599479097,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6672 /prefetch:1
                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                              PID:3220
                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=6692,i,17204105594940821057,11162215623126033574,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4648 /prefetch:1
                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                PID:3376
                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=6944,i,10891439121864739684,5758943612615819386,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6968 /prefetch:1
                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                  PID:3048
                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=6120,i,5149456252701869869,1560056393421843047,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4540 /prefetch:1
                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                    PID:5960
                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=7200,i,8886544534154331340,1758023985960775731,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7160 /prefetch:1
                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                      PID:7028
                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --metrics-shmem-handle=5396,i,7160762427053474244,16911321720300491959,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7300 /prefetch:1
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                        PID:6108
                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --metrics-shmem-handle=7436,i,12436257210474612441,4072044701886944565,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7448 /prefetch:1
                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                          PID:4480
                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=7588,i,18178366710891645670,18083864455523420742,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7600 /prefetch:1
                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                            PID:5952
                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=7620,i,1421312726656470558,18097627279758459623,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7756 /prefetch:1
                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                              PID:5084
                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=7928,i,9858550535559160156,7597391247706228604,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7956 /prefetch:1
                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                PID:6580
                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=8116,i,15517632240934266682,13713695817901837866,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8120 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                  PID:5508
                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --metrics-shmem-handle=8252,i,692264939730340435,3274232450888911004,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8240 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                    PID:2916
                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=8392,i,2622194023617565160,3834551699628262219,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8292 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                      PID:5832
                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=5788,i,16640398212515551548,2808027452203043251,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5992 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                        PID:6532
                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=8568,i,5134869871551720507,11047512128315109370,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8672 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                          PID:2332
                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=7472,i,2692225777010054774,15750004631269850670,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8600 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                            PID:5032
                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=8392,i,12223787585673790629,16616754662885611644,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8424 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                              PID:688
                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=5984,i,16068304743249448725,1677517674667979000,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8804 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                PID:6212
                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=6788,i,17629200649837745525,14702274498083867819,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5852 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:6028
                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=6340,i,9616101779887445305,9776513286109159661,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7284 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:3936
                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --metrics-shmem-handle=7300,i,12838782875724164529,14484222673859628500,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7912 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:1884
                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=7116,i,14578084072815800830,7764477366606586863,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7132 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:4244
                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=6832,i,15175600855937872226,2479306726719722017,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7164 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:216
                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=3456,i,16295326704456435225,14155290546110096671,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4536 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:5360
                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=7692,i,4738259269159485062,17524019668613198612,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7680 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                              PID:5968
                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=7608,i,15241545597158088046,16517933885892697764,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7408 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:6292
                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=6948,i,16835855496448678435,15339434170511135603,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7284 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                  PID:6012
                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=8264,i,14176067490608603736,5610808749413792394,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8904 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:1724
                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=8320,i,15825306433233351662,7623530546819812147,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7144 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                      PID:6308
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=6152,i,10915058255485092028,16966392169441760445,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6156 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:6496
                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=6244,i,1777369093193447525,10756411344262326476,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6216 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                          PID:6356
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=6512,i,5722599766966444905,4890564480504541680,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3256 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:2456
                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=8864,i,12629582001496295577,15313702350025332166,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8220 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                              PID:4972
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=8716,i,709842954067016505,17435588943171642056,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8748 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:6300
                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=8760,i,12723473456470714106,1028216628081499449,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8232 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                  PID:6348
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=7484,i,3115229516996212147,10139306904452561813,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8216 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:5728
                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=6712,i,5317080225194344507,13826880451744301014,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7488 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                      PID:6884
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=8148,i,16805167460047838273,3870233384924283015,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8728 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:1572
                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=7024,i,6808497649309261278,1248153392390166269,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6700 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                          PID:3268
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=7348,i,5993433369269136742,18163956732850879260,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8264 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:6268
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=6952,i,12451907278576189784,10584235643888650935,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7276 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:5416
                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=8428,i,10851438549523516800,16396862530751495453,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7044 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                PID:2916
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=6128,i,17304353844316465336,17291774637270470601,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7016 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5776
                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=8068,i,5299982460938473383,6014021232861524005,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7620 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4976
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=8224,i,10631220432029711849,1295506388378573349,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8264 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:4288
                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=8388,i,7324241081820028434,10445744968649828784,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6744 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                        PID:2584
                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=7840,i,3014005447241710594,17194307771308263950,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9100 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:2952
                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=6920,i,337613693473286814,3194570286035821570,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9208 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                            PID:1832
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=9248,i,10341617551484553146,10421620335991554606,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9260 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:4540
                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=9396,i,2068572686041787536,2968488429877820850,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9408 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                PID:4304
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=9560,i,5022330438098114992,8792543147187596824,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9416 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:4880
                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=9780,i,18401883956889965144,12646380711918421877,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9788 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4964
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=9932,i,8247024686607303710,8201659388432893876,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9936 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:5824
                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=10060,i,5366202538295222754,11180254348352534362,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10064 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:1032
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=10096,i,4430088928053509050,1489413823677734701,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10212 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:5804
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=10344,i,4292521514079490840,16181883256514908947,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10356 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3296
                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=10504,i,9750994041437020284,5608375469737741035,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10364 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6948
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=10544,i,12703503110046780504,1122767057645432145,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10636 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:6932
                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=10768,i,17756826368076599290,7625595270065662612,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10776 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:5672
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=10072,i,5276308417111598599,9511122415800264002,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9796 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:1452
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=6704,i,3061041145890927035,10799340560895465999,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10948 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2508
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=11220,i,125878084445805479,9559262446489295611,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11236 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6084
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=11280,i,10194068126009756183,12032520210215865266,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11380 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3132
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=11528,i,5426364297949844528,15594515240802122926,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11276 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5368
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=11668,i,816235908966772612,4441432567289346937,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11680 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:3788
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --metrics-shmem-handle=11832,i,14943858595146548972,17395511227210261969,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=11700 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5700
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --metrics-shmem-handle=11808,i,2543259018834426065,18322983553251836406,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12252 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:6028
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\Downloads\winrar-x64-713.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Users\Admin\Downloads\winrar-x64-713.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Checks computer location settings
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:3404
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\WinRAR\uninstall.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\WinRAR\uninstall.exe" /setup
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Modifies system executable filetype association
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6324
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --metrics-shmem-handle=10068,i,12968428331962851327,15324174161501703802,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=9140 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2556
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=7792,i,14757472489648224485,1951116773933907299,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7180 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6468
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=7760,i,14989004022706767216,14524185527060192182,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8580 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6212
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=10556,i,1854977385432019658,9624564526822387406,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7188 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4516
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=10680,i,3112040645017307367,1373513248941834679,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=12836 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5628
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=6324,i,15491280742720572514,6929010628574635805,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6436 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:2324
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=9800,i,12130900626011062067,14991407782478659981,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8488 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:1096
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=9884,i,2415780154870778231,5780860209681888201,2097152 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=10428 /prefetch:1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:1100
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6368,i,17016360589784082573,2912628862669819946,524288 --field-trial-handle=1940,i,9514449397924302192,11362207151963706055,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=8588 /prefetch:8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5756
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\Downloads\processhacker-2.39-setup.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    "C:\Users\Admin\Downloads\processhacker-2.39-setup.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6632
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\is-OJUB2.tmp\processhacker-2.39-setup.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\is-OJUB2.tmp\processhacker-2.39-setup.tmp" /SL5="$D002E,1874675,150016,C:\Users\Admin\Downloads\processhacker-2.39-setup.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:724
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files\Process Hacker 2\ProcessHacker.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files\Process Hacker 2\ProcessHacker.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Checks processor information in registry
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Modifies system certificate store
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:5672
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6392
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6240
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\Process Hacker 2\kprocesshacker.sys
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\Process Hacker 2\kprocesshacker.sys"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:3808
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Program Files\WinRAR\WinRAR.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\Admin\Downloads\Xeno-v1.3.5.rar"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6028
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\System32\rundll32.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6404
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\Desktop\Xeno-v1.3.5\Xeno-v1.3.5.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Users\Admin\Desktop\Xeno-v1.3.5\Xeno-v1.3.5.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4384
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Mozilla Maintenance Service\lsass.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Mozilla Maintenance Service\lsass.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:4124
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            powershell.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:6996
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\lsass.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\lsass.exe" -
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:2612
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\lsass.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\lsass.exe" -
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3164
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6296

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Network

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              lsass.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files (x86)\Microsoft\Edge\Application\lsass.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 3.4MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 189caf9893421f12954a3fc7d11aae7ad2e734d64cf9bf83bca7720d4e7d7f06
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              ProcessHacker.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files\Process Hacker 2\ProcessHacker.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 1.6MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Uninstall.exe

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Program Files\WinRAR\Uninstall.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 402KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 39baa167de334fef185ae8b97e8c709a307eed08e80fe115577c59a05200a13a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              BrowsingTopicsState

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 414B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 0602bc0996d7499a46ff7ca7d769180f8435f05d795ac23e9ce61e638863a825
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_000007

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 331KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_00005d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 141KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 0f90529d5b432bed668beb149ce46d46efeb6a3e7c4c44436a3af14907479c7c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_000065

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000065
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 199KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 44478573b2ec7a3cc5e6517901c45c803e7cb63a5ccaace6754597e3c17898cf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_00006a

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 a27936bcbf1b768d2e7d623f808eebd7e03d7571605ed1262b93e2004ac5b0ae
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_00006d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 cd5c3999d7d153b7b8e1a2effd1dd354ddebbf9c3974b8063e6429ef479c6972
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_000076

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000076
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 73KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 6dbf4ce8bd7984da3b3dec2833e8107b11b10aa56a537a2e23284cc52a2d9ea9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_00007d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 61KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 bb1d8e7b856d085e64974ae874541ca7f1183d58bd3a6b4c00c7482eb3ec05c7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_000080

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000080
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 23KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 bf7344a487869f902489292361a3b81e27db3a27017de12d9d61e4e682b8f368
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_000081

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000081
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 158KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 60072b4eb6fc5f1f1214a34fcd55b3cbd1d05eddf778f85611f9b352c4c6452d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_000088

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000088
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 25KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 a2ed66f01753747ce359a8be0a9555b91e18d01c6bccf8e52a74078520d3720a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_00009d

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 21KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 6f32da94d4f26e98cb6ccd97034d306aa38945322c816f54a93c7d15dc0905b8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_00009e

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 9c4f02f38678f2628292d66c4f7a1a6a06af7ffac4d279359b09074e7d0f1fe0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_00009f

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00009f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 a3cf4861c7d0c966f0ed6564f6aad6b28cbd3421a9ca4f60e2246848d249f196
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_0000a0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 41KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 0e2e6d1994902577a3d3a7f0e37875dd22de26342bec8403ebe262f92f2eddd7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_0000a1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 24KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 f254eb93b015455a3c89aaf970631bc989fe2bd387f79e871b514992359651aa
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_0000a2

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 77KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 12c0cf6bb05c9fd92b8d427d575fcac8880b21a6af0ad600ed1ab2918ac29d94
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 79bfbc727ea14a543e0a87cb1d1905da39bb86ca5bdf9111c40ea09bb5c03548
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 593B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              craw_background.js

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\craw_background.js
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 531KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 45KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 953c16c9cee5a29b05c8c64aa9754c2e13d3aa8e2d9a6158b7268e37d714d564
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              TransportSecurity

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 890fe9780ee1d5ab2c498e16ec08a9c7dd2139bc51ff03eaa48636c030236393
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 d5dc4dbe5aa33bafbcd9dcd43d495536e631bb97c12619310155f8e10b034246
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 b8c3748f984264a5aebf1275887248cb99ff33e290adcaacc3a42546d77478f6
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 af3f73a1b38e999ac98459bd8c6a148c34a1610c930385ace435bc92b46e782b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 6f35fb4691c80d72f3f4477ef8984ae51ad92dddb9a1beb5c9fc07dea6e7808e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 14KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 9d2a5f67ee4dd7d7e6e0509731ca30f6273b18bcf43703ee1cb25e179ac98afd
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 13KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 681741442717307b20aa3d911358ca50f071e0ed3ea95fbc753980acef48499d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 144B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 d4a196cbce99a06536a791dda8553857ce2e779c954b802d3626414aea1b7547
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 144B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 095c9cf8f19ccc51a7d69a39ccc0c8e00dd245c786f6296c788150df8ec3183a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 1c101cb3cf04bc01789188fc1817ce6a4506b6574a62c762b32f0e00e23b4912
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              the-real-index~RFe59df69.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe59df69.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 07bb87eb4e401e1d84f242269c8b1e2284b70e7db5aab18f60471a96d3fe9907
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Network Persistent State~RFe5b1847.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State~RFe5b1847.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 59B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 41B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 115KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 1feca6f2a0dad8806b8d618aa8719e5c68181b3b9b2493225387dc5293a2d257
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 235KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 ae7ef302de4dc1d02d78be1e6441e7467c0a72b6d09acf52d68051826fc0a88f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 236KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 0aa256d12a8bf598a31cab50d2c2c790c80cd5bcf6c271dc519cf17e6284dca0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 235KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 3880063b1f348f20ee1c8537372605c11a8a145282b713293e1793978a5f7515
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 236KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 8411aaa83c6882d785c8270f6bdaa8aa5033e74bbf809de5cb4c79f5df5ef25e
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              blocklist

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 105KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 ca4ac85fa9af9d400600502f608a3f8d8bb73aef8a60227135f105dbe1ac2307
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 bb198c81963e699455b64b9ce7875c63551bac1db146ac9e8b16246add4890ae
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 9aeab2c92c5f26a8ca39382cf1bb4652de05a24b8d0a9ed661920c6197bf4c98
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              settings.dat

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 280B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 46246483d08868ff03d5f9bb48e547ca61f651c3e59a4138f5a5da74c69b3ae0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              BookmarkMergedSurfaceOrdering

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 6B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_0000a9

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 55KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 d248144245f66663244e0ef92127b22bfa7d0db0ff3150f507ecaa68f0585e11
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_0000b2

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 77KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 af2d337df29ae7e39f35db57275e79f34a7463629ccaee162ca0cb8fe099a3f4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_0000bf

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 8a29164c52109a487957feb42433363ce62bd7b17c7ccec1f0225b7e9bad3c84
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              f_0000ce

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 47KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              d08126aeff01bdd1_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d08126aeff01bdd1_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 269B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 c314fcaa4727f54015c8d4df3b23d30eca9762429f1fdb60309b8def48b2c35d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 f875a69838fd6d7182cf9123dea6c07a013424b10d2af75b70ebe0d708a32c14
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 88a7f97717008a3bb37fce4b8f83aaf2fda93fec7899a218679696ada8410310
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              SiteList-Enterprise.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Edge Profile.ico

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 70KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              CURRENT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.techspot.com_0.indexeddb.leveldb\CURRENT
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 16B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              MANIFEST-000001

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.techspot.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 23B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 111B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Network Persistent State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 51KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 fbabd3238a782f36f19279a1f3fe4f25a031bc66f90f27635e1b5e6fac1b4765
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              SCT Auditing Pending Reports

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 2B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Sdch Dictionaries

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 211B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 e7f233e72109d668be2291da61dfb077010bf998bfdd9bbd1df5456996470c11
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Sdch Dictionaries~RFe58e9a0.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58e9a0.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 40B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 7db50c59c48bbcb7bde694c9df37923cd10f9572aed3ee5d9b61e3b250e2f0af
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 17KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 82277a0d55c99a7d7ea8109ae5840446d6debad6d6c5143e096b44abc73e071b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 16KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 723ec866d1d1b44ad627dc702b107438b1703d7a15c8abbb5da9403b917bfb90
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Secure Preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 9c46a6599a5cb79d8d41c6908e5e53a4006c2f30cb5cd1d3dbeecfa2537ef855
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              ef4810e7d8aaed39_0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\ef4810e7d8aaed39_0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 63KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 5948fa6be02b17330604c67801918c01e1486e8fb924d69f65beaa6399256c1b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 72B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 1439ffdac104720c7433733b4416b01189ab56153b28cbdce5d74383c03efd59
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              the-real-index

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 96B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 292a29d572a717a14c217267a65c1c044c7559c0fdc9c35047c184f715faa101
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              sync_diagnostic.log

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 892a26d765dc7ecdee02c631921414dab707eea917bb85300b4dc0ea46432be8
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              OperationConfig

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              OperationConfig~RFe592929.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592929.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 704efd354413fcb64814bb9670d3f83843fc588e6ac4e55bda13414be66bb409
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 3142e50e85f2a6a947e0162611f7f7896f1f3bb997feb743a375e6fafe6da48d
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 364a09ce9914e1955667dd7fa76d3299580ceb22dcde78a9cc9171c827d60d95
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 792059aebea8555e118b89c351155f25874e220d5b28f8ccdab8cce0d081eded
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 27KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 a9a7e3fba92ad261655828fbcc115c41f5346b67d44104add5cf79144429ee59
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Local State

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 8KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 e6e35bd460609ab835bfdeec2e33f3b392be893de1feafa1539faa0951c878aa
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 cfba46f4890d52c58ecee993635a27201fe4b5b965d9ddbba20bcfbb31e30744
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 53501f27687e23a3f2a9c6fa7a9334c6cb5042d53ab11749b537f43d42406f58
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 4d76c4eb69d2617a4751ca7cabb505b4a0c3faad5a6a5a70e2eec01454d03946
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              RevisitationBloomfilter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 840b5e3880223b9f185d000d43cdcb44f0eea86e0451906896731293af700548
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              RevisitationBloomfilter~RFe58c82d.TMP

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58c82d.TMP
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 392B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 fa45dea787e8ef9428a6668cf4bf663bfdd3c06d8bfaf77c8abab048a15e9770
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              data_1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 264KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 3b388e1656577a04ee4fca03b6b54f35758e5033f72736d2f93870439b735602
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              b1bd0e7e-0799-487f-8673-a972b727652f.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\b1bd0e7e-0799-487f-8673-a972b727652f.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 13B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 5c90ba4df0ebf2ac2dc822800b468b09b97ea4f2102297dc1cf8f3656bb9800c
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              __PSScriptPolicyTest_duhmjrot.f11.ps1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_duhmjrot.f11.ps1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 60B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              messages.json

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5732_2146214798\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 450B
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              a750f061-207b-4e90-93d6-9af19cfe6cb5.tmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5732_2146214798\a750f061-207b-4e90-93d6-9af19cfe6cb5.tmp
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 242KB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Unconfirmed 396102.crdownload

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\Unconfirmed 396102.crdownload
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 2.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 28042dd4a92a0033b8f1d419b9e989c5b8e32d1d2d881f5c8251d58ce35b9063
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Unconfirmed 66407.crdownload

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\Unconfirmed 66407.crdownload
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 3.6MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 dbc951b4ab01646888b2a91da73a94dd920054c2f27c8cfeacae3eba298e71b0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Xeno-v1.3.5.rar.crdownload

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\Xeno-v1.3.5.rar.crdownload
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 3.4MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 07f36f3c0a68f8e28978018196134edaa735bacb8f1364b2219ceca327defff2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              winrar-x64-723.exe.crdownload

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Path C:\Users\Admin\Downloads\winrar-x64-723.exe.crdownload
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Size 3.6MB
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • SHA256 8ff0daf3ed564cc743c0e23ff2e253997ffc74460f9673f0b6dd037b2db4ce7b
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/724-2883-0x0000000000400000-0x00000000004D4000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/2612-3065-0x0000000000540000-0x0000000001195000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/2612-3050-0x0000000000540000-0x0000000001195000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/3164-3070-0x0000000000690000-0x00000000012E5000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/3164-3072-0x0000000000690000-0x00000000012E5000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/3808-3033-0x0000000000010000-0x000000000001B000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/3808-2885-0x0000000000010000-0x000000000001B000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4124-3099-0x0000000000BC0000-0x0000000001815000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4124-3044-0x0000000000BC0000-0x0000000001815000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4124-3045-0x0000000000BC0000-0x0000000001815000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4124-3046-0x0000000000BC0000-0x0000000001815000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4124-3047-0x0000000000BC0000-0x0000000001815000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4124-3090-0x0000000000BC0000-0x0000000001815000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4124-3100-0x0000000000BC0000-0x0000000001815000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4124-3101-0x0000000000BC0000-0x0000000001815000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4384-3038-0x0000000000580000-0x00000000011D5000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4384-3043-0x0000000000580000-0x00000000011D5000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4384-3039-0x0000000000580000-0x00000000011D5000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/4384-3037-0x0000000000580000-0x00000000011D5000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6632-2781-0x0000000000400000-0x000000000042B000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6632-2884-0x0000000000400000-0x000000000042B000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3051-0x0000000002C50000-0x0000000002C86000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3068-0x0000000006590000-0x00000000065DC000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3066-0x0000000006570000-0x000000000658E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3061-0x0000000005F50000-0x00000000062A4000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3073-0x0000000006AF0000-0x0000000006B34000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3074-0x0000000007870000-0x00000000078E6000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3075-0x0000000007F70000-0x00000000085EA000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3076-0x0000000007910000-0x000000000792A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3077-0x0000000007AE0000-0x0000000007B12000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3078-0x0000000070BE0000-0x0000000070C2C000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3079-0x00000000714C0000-0x0000000071814000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3087-0x0000000007B20000-0x0000000007B3E000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3088-0x0000000007B40000-0x0000000007BE3000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3089-0x0000000007C40000-0x0000000007C4A000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3091-0x0000000007D10000-0x0000000007DA6000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3055-0x0000000005EE0000-0x0000000005F46000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3092-0x0000000007C70000-0x0000000007C81000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3093-0x0000000007CA0000-0x0000000007CAE000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3094-0x0000000007CB0000-0x0000000007CC4000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3095-0x0000000007DB0000-0x0000000007DCA000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3096-0x0000000007CE0000-0x0000000007CE8000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3054-0x0000000005740000-0x00000000057A6000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3053-0x00000000054A0000-0x00000000054C2000-memory.dmp

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              memory/6996-3052-0x00000000057B0000-0x0000000005DD8000-memory.dmp