hxxps://synapse-x[.]de[.]softonic[.]com/#add-user-review

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 07:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://synapse-x.de.softonic.com/#add-user-review
Sample260810-jg4bdatepa

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2672	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308211679181570"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{7E4938A8-E413-4FD4-841B-E4653E6B6F90}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1080	msedge.exe
1080	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 404 wrote to memory of 3060	404	msedge.exe	86
PID 404 wrote to memory of 2132	404	msedge.exe	87
PID 404 wrote to memory of 2672	404	msedge.exe	88
PID 404 wrote to memory of 2132	404	msedge.exe	87
PID 404 wrote to memory of 2132	404	msedge.exe	87
PID 404 wrote to memory of 1092	404	msedge.exe	89
PID 404 wrote to memory of 1092	404	msedge.exe	89
PID 404 wrote to memory of 2136	404	msedge.exe	92
PID 404 wrote to memory of 1156	404	msedge.exe	91
PID 404 wrote to memory of 2136	404	msedge.exe	92
PID 404 wrote to memory of 2136	404	msedge.exe	92
PID 404 wrote to memory of 1156	404	msedge.exe	91
PID 404 wrote to memory of 1156	404	msedge.exe	91
PID 404 wrote to memory of 2884	404	msedge.exe	93
PID 404 wrote to memory of 2884	404	msedge.exe	93
PID 404 wrote to memory of 2884	404	msedge.exe	93
PID 404 wrote to memory of 2780	404	msedge.exe	94
PID 404 wrote to memory of 2780	404	msedge.exe	94
PID 404 wrote to memory of 2780	404	msedge.exe	94
PID 404 wrote to memory of 212	404	msedge.exe	95
PID 404 wrote to memory of 212	404	msedge.exe	95
PID 404 wrote to memory of 212	404	msedge.exe	95
PID 404 wrote to memory of 4916	404	msedge.exe	98
PID 404 wrote to memory of 4916	404	msedge.exe	98
PID 404 wrote to memory of 4916	404	msedge.exe	98
PID 404 wrote to memory of 2820	404	msedge.exe	99
PID 404 wrote to memory of 3488	404	msedge.exe	100
PID 404 wrote to memory of 2820	404	msedge.exe	99
PID 404 wrote to memory of 3488	404	msedge.exe	100
PID 404 wrote to memory of 3180	404	msedge.exe	104
PID 404 wrote to memory of 2796	404	msedge.exe	105
PID 404 wrote to memory of 2796	404	msedge.exe	105
PID 404 wrote to memory of 2796	404	msedge.exe	105
PID 404 wrote to memory of 4248	404	msedge.exe	106
PID 404 wrote to memory of 4248	404	msedge.exe	106
PID 404 wrote to memory of 4248	404	msedge.exe	106
PID 404 wrote to memory of 3396	404	msedge.exe	107
PID 404 wrote to memory of 3396	404	msedge.exe	107
PID 404 wrote to memory of 3396	404	msedge.exe	107
PID 404 wrote to memory of 1936	404	msedge.exe	110
PID 404 wrote to memory of 1936	404	msedge.exe	110
PID 404 wrote to memory of 1936	404	msedge.exe	110
PID 404 wrote to memory of 2136	404	msedge.exe	111
PID 404 wrote to memory of 2136	404	msedge.exe	111
PID 404 wrote to memory of 2136	404	msedge.exe	111
PID 404 wrote to memory of 3588	404	msedge.exe	114
PID 404 wrote to memory of 3588	404	msedge.exe	114
PID 404 wrote to memory of 3588	404	msedge.exe	114
PID 404 wrote to memory of 3392	404	msedge.exe	115
PID 404 wrote to memory of 3392	404	msedge.exe	115
PID 404 wrote to memory of 3392	404	msedge.exe	115
PID 404 wrote to memory of 4576	404	msedge.exe	116
PID 404 wrote to memory of 4576	404	msedge.exe	116
PID 404 wrote to memory of 4576	404	msedge.exe	116
PID 404 wrote to memory of 3108	404	msedge.exe	117
PID 404 wrote to memory of 3108	404	msedge.exe	117
PID 404 wrote to memory of 3108	404	msedge.exe	117
PID 404 wrote to memory of 1536	404	msedge.exe	118
PID 404 wrote to memory of 1536	404	msedge.exe	118
PID 404 wrote to memory of 1536	404	msedge.exe	118
PID 404 wrote to memory of 5316	404	msedge.exe	119
PID 404 wrote to memory of 5316	404	msedge.exe	119
PID 404 wrote to memory of 5316	404	msedge.exe	119
PID 404 wrote to memory of 5440	404	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://synapse-x.de.softonic.com/#add-user-review
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffdc902c188,0x7ffdc902c194,0x7ffdc902c1a0
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,10284940478926589131,8390848746361549676,262144 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=1780 /prefetch:2
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,4071457273631530322,4989314004415770580,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,16343310094650386531,9053662219368452843,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,325586391993421817,3188446519290888214,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,16202104037638894995,15560577744413418675,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,11150468538666774956,13931262929249673126,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,121574385832446408,12004815559695830328,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3612,i,9223080186073564545,963594934358893942,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5240,i,5178211462341288732,10299228125711488339,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,13634075391185244663,10580777485203474592,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,2722673971982282025,7827106451685705758,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,5572540883090681849,17394954070689554037,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,5572540883090681849,17394954070689554037,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6424,i,1966758935869678247,1489967094916313111,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6596,i,9333264359189257929,9476299547668369237,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3780,i,13718875675113278076,2922454818154513103,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6884,i,3256580623129872699,371050011281929207,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=3728,i,16198906292822311802,17102753399558759629,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7172,i,16003376259628794077,14926098786393054787,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7260,i,18007468614765532314,1250334925966532452,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7288 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7404,i,18145057292494479084,13492916395425515779,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7412 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7552,i,3932369479643984654,10512161879989222117,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7568 /prefetch:1
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7772,i,3974769630669972597,1046741994167808937,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6608,i,1460541030512163412,17561223169114002985,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7976 /prefetch:1
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6620,i,2538325181400050943,1109888119296509765,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:1
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6720,i,2623245141624629332,5520802911417620384,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8164 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8296,i,8879932607806831073,16210514080073516661,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8292 /prefetch:1
  2⤵
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8432,i,402273280468922506,12579454277751552727,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8456 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6864,i,9363782798166677440,14990503191628233575,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7776 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8296,i,14436969769298922340,15779664631900105078,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8128 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8156,i,12946535159771435017,7414116350042167049,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8620,i,2964294184283365826,5060272070513450323,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8592 /prefetch:1
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8404,i,10241703799734918287,1438892314764260996,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8768 /prefetch:1
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8812,i,16711562358026793236,2004165645222033668,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8820 /prefetch:1
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8988,i,14856852468861226312,4797343116090145326,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9020 /prefetch:1
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5176,i,9393052683048495362,286890847437985667,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8872 /prefetch:8
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=9324,i,7246059472147494440,6150176930891282234,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9312 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9456,i,7213406079157472757,14979862915952483369,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9464 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9604,i,3937222432026723243,7655805910852408173,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9608 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9748,i,2822723241416602572,15243773298071364836,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9756 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9952,i,8965216073402024613,6705847741712732997,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9984 /prefetch:1
  2⤵
  PID:6360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=4012,i,17528249016677085036,374375315005859114,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10116 /prefetch:1
  2⤵
  PID:6524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=6456,i,9436966188534233447,8261314798923360307,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8856 /prefetch:1
  2⤵
  PID:6608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8332,i,8140556819669860928,12520446043987588753,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8748 /prefetch:1
  2⤵
  PID:7116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9820,i,9168188730465933194,14423204276923876226,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9792 /prefetch:1
  2⤵
  PID:7144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9676,i,15392917922329367082,16377867122648682680,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8004 /prefetch:1
  2⤵
  PID:6440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=8892,i,12299238905061224305,16936101497326682615,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8912 /prefetch:1
  2⤵
  PID:6760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8900,i,422566857832990810,16525530618930428623,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:1
  2⤵
  PID:6852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8944,i,9870199576743776661,16382646426368636433,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9156 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9104,i,5606854375458426181,14267286453999233142,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9080 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8280,i,8202754805586708629,6783128405711516907,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8324 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=9420,i,5862336676178165211,10040197926219146935,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8140 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=9432,i,7439579487496894593,544375020894667711,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8412 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8136,i,6796068778328501509,15279168015303700398,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7408 /prefetch:1
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=6752,i,17560703105226958226,9938185688908625424,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=8680,i,13486718491122749335,16552387397591776350,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8740 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=8024,i,1563255592372150257,5040034764135143724,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8508 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=7508,i,14555300954412610130,9214930687931575678,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8060 /prefetch:1
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=6848,i,260480341919675151,10515366802848481582,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=6532,i,1277027336019313367,11033743617337239836,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:1
  2⤵
  PID:6200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=7588,i,11413262197642319158,7729563069072707859,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:6244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=7988,i,10052290635767657120,2120327491900113532,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8240 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8956,i,16752820679736807424,5355416900227011842,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:8
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10428,i,12684813210051252668,17101421752021430305,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9124 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6560,i,5131230220803116589,16329766575826437239,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:8
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=10472,i,9926536796358297758,677726231107313024,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:6996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=7960,i,1917235583395806130,5886773798611482439,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:1
  2⤵
  PID:7004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=8000,i,15052472042078408257,14098444161314226712,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8204 /prefetch:1
  2⤵
  PID:7060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=6532,i,7829098758144294249,18279861831936981181,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7812 /prefetch:1
  2⤵
  PID:7124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=7284,i,6990812961229619301,14650812645551078080,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:1
  2⤵
  PID:7136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=6192,i,9223043975928488927,8264066491925585113,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=6920,i,7975298097008575338,7029376579534557150,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=6556,i,10456885805726985997,597684447540553744,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10452 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=9504,i,3241876404633925409,604112456965582387,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:1
  2⤵
  PID:6936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=10428,i,13963372316475835643,17405907537904611513,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10472 /prefetch:1
  2⤵
  PID:6944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=9624,i,18261890655072601682,6701370458509046280,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9008 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=7300,i,7541403574981522233,9545117340410852384,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10584 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=10760,i,6066676282432878316,304357172347842527,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10720 /prefetch:1
  2⤵
  PID:5384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=10608,i,1471943408798521850,9528403120651012883,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10888 /prefetch:1
  2⤵
  PID:5316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=5324,i,6776565929197981317,7165198038122835521,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11020 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=8928,i,5327025210488467035,3581749527997252788,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11180 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=11304,i,2180615833633939598,11862026487496421187,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11352 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=11464,i,4942436334564597221,1699227277937640843,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9652 /prefetch:1
  2⤵
  PID:6472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=11644,i,8356381442158405334,1902768121936791116,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11640 /prefetch:1
  2⤵
  PID:6504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=11752,i,15053846811012904854,96938694570300222,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11748 /prefetch:1
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=11960,i,18217079240544278446,3791555506983100841,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11972 /prefetch:1
  2⤵
  PID:6388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=11900,i,5678588086597850097,10652966823762371294,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=12120 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=6964,i,13724632896417297724,5486698024151768067,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11880 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=12320,i,2432493051465987760,8441325321754287618,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=12336 /prefetch:1
  2⤵
  PID:6464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=12468,i,2058742187375986510,6701729097600163190,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=12472 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=12616,i,6484140609873708822,16606087108870009165,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=12668 /prefetch:1
  2⤵
  PID:7208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=12768,i,15289027182744148683,9192341343885493549,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=12712 /prefetch:1
  2⤵
  PID:7272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=12924,i,2536720504102083097,17477401772636106221,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=12932 /prefetch:1
  2⤵
  PID:7328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=10768,i,11550568031788252657,12656920821265552842,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=12600 /prefetch:1
  2⤵
  PID:7392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=13192,i,11689171417209969461,1422762966012433435,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=13188 /prefetch:1
  2⤵
  PID:7452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=12632,i,15029386240625000609,10258660465602080556,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=13164 /prefetch:1
  2⤵
  PID:7464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=12940,i,2919486245163152975,1239785703190035259,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8756 /prefetch:1
  2⤵
  PID:7580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=13604,i,17645268989242890023,17960228579259786925,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=13548 /prefetch:1
  2⤵
  PID:7660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=11796,i,2323228865870401192,765812483120015981,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11788 /prefetch:1
  2⤵
  PID:7940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,17514010621180453602,3172133916216972261,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9296 /prefetch:8
  2⤵
  PID:8028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,17514010621180453602,3172133916216972261,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9296 /prefetch:8
  2⤵
  PID:8036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=7604,i,16656808378266201108,1443202665135990485,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11844 /prefetch:1
  2⤵
  PID:8104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=12684,i,10058691563939475196,16802341646207682494,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10996 /prefetch:1
  2⤵
  PID:6652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=6712,i,334123991318667811,7506214901880647858,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11828 /prefetch:1
  2⤵
  PID:7556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=11140,i,4396661364765731284,17735938097412508443,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8244 /prefetch:1
  2⤵
  PID:8184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=11064,i,14487344847524330380,2008111977299032040,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8180 /prefetch:1
  2⤵
  PID:8004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=8464,i,3526584723228135203,554963233204685890,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11068 /prefetch:1
  2⤵
  PID:7996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=11336,i,12534154488304015895,481053868409612558,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8736 /prefetch:1
  2⤵
  PID:8012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=8364,i,6439171625440910496,9621020318448126392,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:7992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=11720,i,15656389778900107764,2425115437233136276,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11352 /prefetch:1
  2⤵
  PID:8112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=6912,i,1148117877450241965,13179581070641273868,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:1
  2⤵
  PID:6436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=6880,i,17757288573408629595,7815741996166292930,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9368 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=9780,i,1064922180407459669,10989154021142844067,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8840 /prefetch:1
  2⤵
  PID:7408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=7000,i,326188098753308800,26755452400676090,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9000 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=7876,i,17526960142444997341,7852566178423368145,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:1
  2⤵
  PID:7336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=10404,i,8171024073116145636,3705964852226226665,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10616 /prefetch:1
  2⤵
  PID:7440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=9452,i,14726417453848961721,5923948997672986661,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10456 /prefetch:1
  2⤵
  PID:7352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=10628,i,14189457551627999921,4535552382758260074,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10648 /prefetch:1
  2⤵
  PID:7632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=10656,i,1833617396984044164,13077931789160530983,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=12696 /prefetch:1
  2⤵
  PID:7656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=12180,i,7696045427989142211,15970524621305775278,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10992 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=8652,i,1968991077111566344,15400877543495089794,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10884 /prefetch:1
  2⤵
  PID:6480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=6512,i,3457482934287384892,8539471537084203422,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:1
  2⤵
  PID:7044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=12124,i,1814583985029937320,2316419978776212049,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11568 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=12116,i,2087600999811271463,2589546548418850602,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=12748,i,8990878736796414791,2974731263743827591,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7452 /prefetch:1
  2⤵
  PID:6268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=6188,i,8619176134777549498,5182200725144860177,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:7784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10568,i,7400400610484833830,5688639332907946733,524288 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=12116 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=10900,i,11563215561491459681,3104412651030417288,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9008 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=11636,i,124521059379754126,11457911661677244893,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10548 /prefetch:1
  2⤵
  PID:6228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=9652,i,16828174065916921127,7374292979891663521,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8504 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=5240,i,5102442170363847454,16394831696008404926,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8404 /prefetch:1
  2⤵
  PID:6248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=11568,i,14129133020848825104,11074345899084703979,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10860 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=12196,i,5448521942854660481,7919423537349203078,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10092 /prefetch:1
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=10744,i,13782749097895644092,5582743478721338483,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8596 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=8712,i,17167635346409261706,13542514727589410638,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=8468,i,11540451824089114694,14230172627248499919,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=8492 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=8108,i,800550385442587809,712879636264706109,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=4540,i,10499385626389464546,3989366235284874038,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=8096,i,14155661974390709776,8019720256358594403,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=9964 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=10408,i,12969738325101506584,11406142160710430840,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=11804 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=10688,i,13239132436290895747,5458440546144663645,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10636 /prefetch:1
  2⤵
  PID:8168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=10232,i,6310283044078431656,2100947770466932170,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:1
  2⤵
  PID:7600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --always-read-main-dll --metrics-shmem-handle=8244,i,15739173415326387021,17250657630866736698,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=7536 /prefetch:1
  2⤵
  PID:7752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=12124,i,8231080628220589402,3018506838615388358,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=10696 /prefetch:1
  2⤵
  PID:6904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=13200,i,16479111017770941547,18300034219868278489,2097152 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=9456,i,546125207478819545,10657727746467504397,262144 --field-trial-handle=1784,i,11658093785795325826,5365984454843606925,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1080

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 083d78ea5ea69126b24164f2e05fc467ce21fdcdf2ec67f8e94c4366a1284886
MD5 da79f81681859af2b76762aa37a5f73e
SHA1 53d69c959eb46848bc7ed7b5c480df864295389e
SHA512 f647681c342e36fa2f41fb9d54d089303f98b802703a42609226ef5755aafc91ef00af41a82f980c0f2819709322c59ef6cd1c18725ef5133691894902fc44c1
TLSH
T1FCD09B7077CDAC11D5450471D45547535D96CA4C24D7DB076011801D68557D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 965e5ede1dd95e7182bc6ed8b645e4796c53616af10fe7a02b411984e0f5fca1
MD5 252c38f22d645a5fc39fa9f1fdd92b34
SHA1 70c6079cc3ffdcb0efb6f56834b64311e1e951bc
SHA512 e23e1b164567d933593229d39744ddacb3330f715193f293c7aee9a5a95fc433809933ab830a7a1c5cdf37824965c32650c227083092c2a6488a2ab768744ad1
TLSH
T110D09B7077CDAC11D9450471D45547535D96CA4C24D7DB076011801D58567D9B35E067
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00005c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
Size 43KB
SHA256 1d74aa61453a2cf3e98dafbc9f61893604a85fafb2e152eb11f55dbb7e834f7b
MD5 c07a5bf3678a9a4ed7acc6bc98196cdd
SHA1 4bb508f9f307e55a8c956438c406d1479bb3ceb9
SHA512 58065f21869d915eb923b41120e7a90c38aa98e28276f43d4f5eb422cefb51b639bc098157baffbe526f9d852db03978db4f4e11f2a6285c821412295531a8e7
SSDEEP 768:8lfRxx0H0ITZ2mc1WzmQavXP5dZXnsXY3vi2ydJAwDbERAeTCNsGaJrKC5a:8lfRxuUId2XQaPP+I1y1gRXTL5E
TLSH
T17B13F16DA68164A743C9508FC7F88CA40748453D6FD457C33D6A50A77EA1EF4DAEF480
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
Size 114KB
SHA256 d3298ba800c80577c206b33ce9d90b07eb79a68bc98b1c7be473e19be69e54fd
MD5 23c70ed27ba1388f3374b6d7f2e2bf9d
SHA1 ac3e74029bdd04bd6ac3bd3a086976ce1cf73552
SHA512 933df11a077ee890b7ccbed9293023ef0b4984e878fe9ef76fea646f77d08bea1294edb4d44fc0c6f3cd62344cf0085f17b2dcdd2fce6274e4794a273cd0e0d9
SSDEEP 3072:mbbF1beWR+2ogFxYJ2mS4xBs4vSx7jzTbCIOM1:sFVeWlogjYJ2x4nsE67jjEK
TLSH
T135B3122C25BF4F1D2E11D374856E7E8C8B00A34974BBA7C7297FDC2206196122A5F66F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
Size 45KB
SHA256 398b6bbb16bd441fea10c501f6e838ae37490dbebc4947c2a3a729655b50a3df
MD5 0e42fcba5b4aac2935988900f2a98968
SHA1 0b85d82c039b5f9250b3f049ac6942fba571374c
SHA512 a352062d5b0b9790ad66c7762fb9e904b3f9d456d78c785263ffd9c26d776eb5c7f998279d7459bd862c428c0ea3e5f1e9a598f97f7ac11a6d76d0ecf09bb9ca
SSDEEP 768:Gu1AFktjVWm70ASk+BBiXTOCcE75iZp6gbjm/SXe6WoYUTnu5rSh:oFktpWm77Sk2BOHB75hgu/ee8YUTukh
TLSH
T15B23F165E9EFF0DE4CA4CA99A318F8CF42CE5F4D042A88971DCD67F438C5AC99454C52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
Size 180KB
SHA256 89e7f687d52cf753bdefb25cce5a90b60e3e31f591d7d18ca1f3c241b9634c25
MD5 9bf99126c60acbda42f9f1ed190747b2
SHA1 99564dbf4956637dcfd21c68a049ea8142dff02d
SHA512 ee369c87f976ae57c50bc60ce4b021ce0a4e6707f5c45fa24b78385b20aed2731a1e0ce05d5fd24185ffbb6b923b5b97557ef7b11cb2e52ebd8b6961972b75df
SSDEEP 3072:RLGRVUUABS8lrmgWTprQGKUTFcvxFSPTJrQ3hgSjWULdI1vUDgIdK4sWz:ZGRNABSvgoprQGKU5NQxKxmD44H
TLSH
T1150423EA5D8AB469C04E4DBEC3C6155760F22AEC6418D8D8BDFCBBE6C4810F2F931605
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000060

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
Size 141KB
SHA256 4c0375eb304087d3d259a89e8ba59332e9eabb785851c35722b72cbe5a48c185
MD5 a2acf839b0e4eeaea87c5ab518bd5a9f
SHA1 cccd58d63466caf8c26973233c7ba2044f524d22
SHA512 036367635ebd4970ebc7a46e8cc04701381899999863c45471a0afae565fba0e10c482a79b17292d7e3b3e451ff51403608b68b8ab63e10166ebb363144fcf8d
SSDEEP 3072:6ALNzvYodQ39kx3KVgklqZhqEmmmkJec/Zz2WH3B4bXbmr3Eu:6qNzvYodQ3ix3KqQNkect2USbSD
TLSH
T13AE312ABF6513AF4FF8685564C20FA251E6EC163B4742F2C1915F82346065BBFA8E0CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000061

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
Size 36KB
SHA256 5e0e454958343f26d0d288c8ad93403e2f393036de7e40496430e22105f0503b
MD5 c85bc8d26fbfb53a4a2ba48839e30f78
SHA1 00a5b88fb3aecbc8c82fddd4e611c02064620495
SHA512 196601fc95556aa63d0deecc5a42cdd5e5842c0153290a88e2fd0f7ed1163688cbddb353e5153103e8a80c963ebb0ac0a12f570b769f87c4b294df8af3dbac06
SSDEEP 768:ku3osw4BkSUquomptMSE+5DjSGP2UBni2hdzf76tKTUdImOL3St4QlTuW+:/3osRItp+SrpOq7iqHtTP3elCf
TLSH
T1C1F2F2851DCA6050F86CF89D83B81734ADE6B5306B750E608D4EDC32CA7D364F3262B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000062

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
Size 24KB
SHA256 def8db3d0393b41c222c29e372c8ce57f9696a7afd5e93ccbcb225e4277e6b96
MD5 1a8d2e6c071e6ebd41e2f8851dd4d912
SHA1 c12e0c8de14b218dac205bedec4500436238a31a
SHA512 4a304a05b7fc18c93ddfc3aa2a4473b7145163c756bcba010ec8549dce90993722841f41c465a1c0d717774a6e394322a949d78706c423a0a9ac87fdff175fe7
SSDEEP 768:C92mZJHiWE0Gw3PBSUA9Kxrtmejy2zsA0SOHQbXHAEO:CNLfp3PvA9KxxmUy2zASOwTHAEO
TLSH
T146B2F119CEE3B922ADB99F25EFA836D108F082547D7D6FDE8E19440C8F1243076BB056
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000063

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
Size 16KB
SHA256 0364d368abf457d4e70dbc7a7a360f3486eaea2837b194915b23d4398bee91ac
MD5 68c477c4c76baab3a8d1ef6a55aa986f
SHA1 4af50379e13514558dd53d123db8ea101ec5e24c
SHA512 92b34fe3b7f82f10cf6de8027ac08f4a5b8764fb4e0b31c93da6e3d5bd08e0bc83b79fd70b8207a1066b689583e0b6976fa3c885b0c067ea343e6f2031d55d25
SSDEEP 384:Nd1nZ+hLc8g3/2AY8VL6UBP38Y1dDq6w9ZD:bJZpv3h1Z3x+9ZD
TLSH
T10572D092B7F2D6B84D28BDFE122B04099CA91D8729F113F25942362BA5B1C6484FD071
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000064

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
Size 92KB
SHA256 185d9f2b1f5bc041109b0bf3ae1ccf8d1ae227c97a61ccf2f83cb34bae0515bc
MD5 29f32bed76b19cfce9648b2235039014
SHA1 5267de14ed3387c4b99522762cbbfd3ffb3e89cd
SHA512 36cdcc8e7befd3f2efea7a08b76da349251c6973058a055a722bbc92a99cc22917b5effe7db63614bc2037b60a676d00a6499217f0cd95c905a93231855ebfde
SSDEEP 1536:A8XItb5yKzQZrON/0F6axm0nVPO7YvUwEDq6CHM6KdpArb3EnliHeyVIW1qiiuzv:Al8BU/paxvOO1UEuYbEnlV2IW5zrPLX
TLSH
T1B19312ABAA7AD94FE0A9A43DD31F7F3D80CFC64515D0E68D587F0A26E02A098D5005F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 31KB
SHA256 75e714057208a7b572118f34c859b4a42a70e3d339f8e1e894b89da3902c2a4f
MD5 ab49dc4bcc3da5553297f881fbb93c3d
SHA1 a2e724a2bf91a1027bcae0a8b7a5582762b7b0b1
SHA512 27bbe92129b9a97824f6055477fa5c4dbf3729677ef7cd251c034f849cc2940960f06ab8ec8d7319692fc8bc76820f7722d380fc614a461e156aaf361b82d2f6
SSDEEP 768:ZpO8AGKifGHUk4L4ePjY3oWhculEthfBifIdM1Ik9R65GHKG3:Zp/AGKiw84erDWhpEEfIdhksGj
TLSH
T117E2F1D85B3444EAB8F814245EAA726ADC69DC83D40EA7217FC92F4413A431E788B1DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 198KB
SHA256 e7ba62b5e037c11dc898ff07f00f2ee6fe8b570ffe598563c376afaa0601d1f3
MD5 c5280bd4e767855f2f64fb5870013072
SHA1 5e98a622833e292449b21ca98d34fc411777a664
SHA512 9929da6a2e77ac2a6f7323d1043ddfca86dc6edc97e7cb54fe0ee1b36d12c6593aaab009f9e4a7cb6623f304b5958ebf3dfb24c8ea0fd85d66350210cefe2db4
SSDEEP 3072:4rSpw2d8TUH0IVvD3Iiptj+zOSFv1sV5gCHbMu6c/oX5x5Yo9TXP39FfMlLmIq:44BJLNjwNv1mAuFAJx5nPPaSr
TLSH
T1F5142280525D3500EF05C88D03AE77CEE56BD6F2BC19687628947EBE067A9825FC30ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 57KB
SHA256 07ccf77de0e6c25eb5ee571b530a4d51854ce3326d394f736b0a79e4043d37e7
MD5 51a0279195f4a1c3962b4e1517df2f06
SHA1 eb7c1fe5c602c838ce680cf86f0e7b2953b24c6a
SHA512 b953788b9820c188c14f26664a140f12609f4e12ede4da41faaa51a178a45ab9dde6e412e73644671f6d09411f818bcf721465b0894b6e42393253ce1c3a7ae3
SSDEEP 1536:DxX73ZFgB/LI37Wmfcd5R5aVblA3xJV/gXTXQAtCriy8:DxX7IB/LIrLs5R5IS3xbSxts98
TLSH
T1A04302FE6D5ED405A6A3573D05BE93EAB7CC1C315C2F2BC3D1508406929086D9CDB922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 108KB
SHA256 415c67ebcb3cc0e721e5cdafa4d23ac7b9a438a5f2ca60ea6d48472aa0b2dbb9
MD5 eb7cb862bb237a04d33118244a702170
SHA1 ed4da0884febd273178ac6b9ecf0d94ea15a8bc2
SHA512 765ed2582e7b3f7360097cea72b19a5fba047453122cc40cb7fc672de02731ef88afaef804b2f272f2a6fb9fbc08179736046a347fb6655b19a2fd30285490a8
SSDEEP 1536:8OxTJGUKs/knz7yH0NvAo2izsZh0V5zBcfkUXgRrf7NC4gw9aPAiQ2PdqibrjAuY:8SmgkzxCpCsZmowFNG3AiQadq6Ud
TLSH
T118B30267FC6D09CBE0F4B6E872C0B26E25C87E603537AB6D6F4078E29D584827464727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 34KB
SHA256 a27936bcbf1b768d2e7d623f808eebd7e03d7571605ed1262b93e2004ac5b0ae
MD5 1431b48d0ad324ccbafd31bbde2a3517
SHA1 adfa6eff4e5027afa6af10798ef948d8d1e1d9c6
SHA512 75efc1a532d9bed68283a95df0f7233ec787951c0438affe4ecdde9ca6f9b71b7fe30aa9730e181cc11f45b7d32a459f9a14d1c81654e32e59db67ab37363f4f
SSDEEP 768:boiVuYHrigiek7D9pinbZtB4xkSVz0qz5QY0IG2gcbX0SgD6tevLieW:vuCMniXBtSFh5EDJagZc
TLSH
T124F2E159C3F4D86B6853E0C8A661874390D9858438A3A74B70842773FBE387603A5EF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 18KB
SHA256 f07ac818bb2812ce6ca79bd1cf374ac863e648ff338fc72800666afdce06a9c3
MD5 b03ee9d0ab28a7defb97eff37a626f44
SHA1 2c5a9cb81cb4cabca6f3c01437ce444827af85ba
SHA512 01f0d9eeb1055e628b6d3642708f6a74ebc68c67cea4991a1394cd844841ca498c25db4475365774e539d878985fa6604ea56807fa05014036341b6da32b080f
SSDEEP 384:hACXxKRDqo/VXyw94Dk20zIcg47y6e38DQbcf0H0:hAqKRDJqk2Tcg2y648DGcMH0
TLSH
T18C82E0CCAD394D845A104ED8BD8689C55EC169CB608BEB5F972A150FCE3A3843D1ECB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000071

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
Size 144KB
SHA256 2c4bbcfa4284743d0425faea8da1e3ec260449e201b14f85b865af774427c6c4
MD5 dea9669fe470df6d221197d6d704cd04
SHA1 aba2e617c05d299fcfba8425f51d500f0a4710d2
SHA512 d38593456066b6d60dc5d4f4fb55cf5bd481c3e92d7723f8d9a3605c277bac0c0d07d34a9e1cc17d6e964224134ef1258a4d937cfa390a698f987d2187ee7fc4
SSDEEP 3072:66cOK2Akm3dxmO8SXZQhgOC2+EzndO+6Nv1mHRpx9E/UP1Du:66cOJAkm3GMXzObfpt6STfLPM
TLSH
T1BCE312F487FD85D07BC44BFC3AA6D629CB31B571C6DF402066F1F7A4660A12D223A455
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000072

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
Size 144KB
SHA256 9c4b89c9d2b23ffd2b79baa0a7863e869601c32964e47a3712152ef4ef9112e6
MD5 20e79e26354051f6b8e6fd84662db17a
SHA1 4bf6f11f648ada65d5ff5b3ee3ffc6dbd212759f
SHA512 890eb8f1e73a62fd469fe804fc4e5663a1157bb0e241862c5170bf2d59a758fc08c7b4ecb4f92c4b57a08b7ac851b6494351bd1a2930fbe3cba5a373d8f63666
SSDEEP 3072:y5qN8mQ+aXx6QpxML2z2cHYfKVS83fWsby0G2bcF:qMAZpx742S8v/by5F
TLSH
T116E31359E51239688D25DBF9CD5B23DDBD66D6492AF5B106C8912E8CE2CC0CACBC0D32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 22KB
SHA256 8a29164c52109a487957feb42433363ce62bd7b17c7ccec1f0225b7e9bad3c84
MD5 068c56b4c35d467bbeafff035f15c901
SHA1 f0e68c98db14d2838adff93e862cff1e680f19f4
SHA512 aa0af9450f89292b506c00326ee3c4072194ec8cd810b330b4731d3055232cffc0eeeb164d887e39198c60a3238a5a52f032116e1b8253fe38ca6b79f324e3f7
SSDEEP 384:0huQcxgXVqcsR+C5KTP8KWL/GgssK0pgD9cn3LlpoWROY1vCLkafCfds9tVYsXac:0h4gDsR+C5c7WLugssK0pg5O3DoslJCn
TLSH
T1EBA2F15650923A9F784B2544A1F5303E3F1B94CADDD49013AAF79A20E9F3CB0F65D8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 22KB
SHA256 8fe5b78e8c5f9dd9c7e9cbbc2dd87083a81d3dddf47a55722a94e639aba3539c
MD5 9ea698e60a34bc55ca80da706c90d0b7
SHA1 002c54ec99a0f648e9c193d5e62c659b09481c71
SHA512 73005a9001c8fe3c08540e48b4c273ef9267d5325e67504738fd3ef4d7bea06904d2c7c6555e5ceefa7840e3a22b144924b7aa7099bfda5096d7d41bc2b39eb0
SSDEEP 384:dkm5lNJ4cQvqpG4pmN56GmI0YeYBxU9k/MMCP/8Zac0N5RNAkpRfwYG9t:OylNJtQCY0I0YeUU9k/MtcJwRKAfkt
TLSH
T14DA2D0F9F959EF34DC435D796A59B8FF99F881A24A38D88B1206896431C906C8C02BE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
Size 47KB
SHA256 c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4
MD5 65850a373e258f1c897a2b3d75eb74de
SHA1 1dc044f4824fd5af6bfed67fee48be70fa069f3f
SHA512 df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b
SSDEEP 768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA
TLSH
T156230251F5F8624A7FC3003FBC317BD862909FE5996EE5D91288F30225611DD29EE017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
Size 24KB
SHA256 1673462303954bc9988b2166f09a58c2ddc97cf49536111538ed3d20fc0ef113
MD5 e448c716ebd418a3d960eb3f853183a4
SHA1 e19883d36b73416a2d5364451ec45710243e3f9c
SHA512 16545267c9d786914b8fe9fa83d4c43fe02274932af3bfc4073a4a3e71a4fe39b78642c46f3eeb329cd59a94cfa6fcc67a19f1e623edc48748602f922b30cab4
SSDEEP 768:3cmk7P8ku5An8OUNYJqXbe36DVE0GZ7XXCLvcG:ZMpHA4qXbe36DVKZDwb
TLSH
T136B2E124F533879D3A2CF80A24B037E57FD695F02427C58A73A593480B89F7E8D5466B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00007f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
Size 34KB
SHA256 6438d7b8ea9c7c3992d5e2fd2afdb1ff948570a3ef0bedae76247b51632960ba
MD5 c154477b9affa3a0a47f894c8b80c03c
SHA1 b6711decba0d571b538ca01de8a6e70ae4d219af
SHA512 4573c7b0c16c726dcccb6319d6e7fb0d163fb90e1fcfd4228f7c471d52dc4076a5a59b6516c5ab613eadd6cd269b327b3f2cb4f14c2b336c28d31b3809283df0
SSDEEP 768:/plpZnTpd3+CSeY9oJ/P17/4T1HHAG9i6XG2g4voyj2i2619EHGh:Rl/Z9d7/8v/mGCL6fEHGh
TLSH
T1B8F2F2C17E122F303604F5F6C0B653F67372E495EA5B8BC098A65576CB06F15DCD904A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 28KB
SHA256 5292d0fa3bba9df90ac0bc375d1abcbd2c5c93c1d677722cf77f3d2e8a29b445
MD5 8e108aeea662c62f06cefe58c2fd3efb
SHA1 385ca255677c13ea628bda77973928a637a72c84
SHA512 1c72d4eca2f530173041013c1b71e9876491f72a238a4c1eba063b26c43878771fb814880f477da6fd7c65bb26a72eb6d4989938cd52262a03c1392fcbe29d6e
SSDEEP 768:YTUW50zM/6rJ5DIsptl2wm7J1PR+0T46sVjlHOIiZk:Y505/IsptlRI5+AuNOLk
TLSH
T1DFD2F1414BFBE40FB415228C6231CFAF0644D3E8476AE52BE4DEA1CA176E336D1A3975
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000082

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
Size 70KB
SHA256 c0114f3d7fcc3f728f340264470e65e897a10421933b7d13ececb5b8eadc76f4
MD5 41ad45df45360eaeea048d2d7fb566f1
SHA1 074456dbea295880ecabadb87d689eaaf9e1e080
SHA512 7ee88363920420eddaa9e56249adbc1d63ca3477966c052dd5831488a5d3efcedc4fe495f5c78147d08f39764349648243317ba8628da7e3241c120aee8cb8e4
SSDEEP 1536:8b3ru0UDxI07s/oFi+ZQJQXXpe7Fi+XPLJXQuVpuYKoUEn:8b3nUqmE9+ZQNkmNgR2hn
TLSH
T1FC63012902EA47419589E65835366F82FDEC3F162D2D88C233363638EB7525BC64C6FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 50KB
SHA256 ae80604091c3cf7ebe4e4e4282f45b963f500b3a0c5edc8c3f8566f6c15e3808
MD5 ed2ffeb124fd37559797aaa0dc00e843
SHA1 ee6b1fb1fb9a2a948915c719d25945d9c40eb8a0
SHA512 c24fbc13421c7580154e9047cde7214ee8542056bc0497206846359a5e90024832b420e6308bd13956ec46a43fdba92f449c3bfeeca4e2f0c270f7e959a4d8b4
SSDEEP 768:fq5Xg5O2C+yROSxk5UJM6OJQ4EnDRMHRtbwJyPnt6i01eAccSah1EfijCygk5WyK:KAOYz7wlcpjygEHucsRbfhyUFXR7g3gR
TLSH
T1533329993192B13593EB25B8D27F2202B33A5D513C4EC054B0AD8CDA3C6EA46D277F6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 95KB
SHA256 fc8dc003f0c0fdc5c4851d899c529dbff157ddc161d259a52c3874280c09ff01
MD5 ecac1c0606f6082fc5eb7b9079aa0c49
SHA1 d5405ff3b6358fdfeaac230775274646b11b71f7
SHA512 de2e7adf52db2887f3be9a74e938f9c8db08a70e2be4b67b2b32c73b17e6af595d737972e950598a036a218336d0afb19cf8a957ee3dd16ccf946378d34a4aad
SSDEEP 1536:Oz6zAlRnIg9aTaxYwoSxvvyhAEeX7vGQNr4B8FiA26Xg3Y9ou+uvbWH3lbIPz:wYAlpJYTaelSs2jGYK8Fi2w30oA61IPz
TLSH
T117A30219D7A179D3B29D8E67320BBD8A3F3B248FCD98F2525152646020767327B8D09F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 174KB
SHA256 f1e8a68bf425049bb701da9d547a5f93bfdeeccf2a845d120930b38740355dfa
MD5 e393fc133d45447bd2bf08cba27e631d
SHA1 405b45585902008d4e6ad9a65d51ba2af02bc239
SHA512 6f819931d1354e37d7f486a6d85d629bd9792958c57ccac3ddc3cbf53fb8b83e402c643a586a59c7c28b66d2b199ae438256aad0196416b06f9a048bc805ca87
SSDEEP 3072:gFu4W8bL90cYS3Xftl+Hic/j8F5fdcL5v/X/TQNC53BzH:gFun81LYYXlECVBdEHXLQg3BD
TLSH
T1CD0422DD946D5B403EF3F9AED4E0832E8610DD2667FDE49AD8456B7293833527630D01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
Size 24KB
SHA256 c7f1ab381d3c6f0c52968d2d14278c0b107b53a5e154b7381d2a46590e7d33f0
MD5 8b62cb77af08af8a3c92a15d0534ad07
SHA1 a7d15c6d6a8177b229297c54df57bd344b794513
SHA512 3ecf677f8eff0dfd5920b9d2ab8b8de21f7eee62ab429a033b0fae624a6a88718e595a81bfb5dac841f1d67bef8f0d786ba57a5096327cf959689dcecd16a823
SSDEEP 384:ziHP8fq520czx05WRFDagKW0LGE5zX9twpBqNuCxQSBx7eh9nAj751HDdg8Y:zcEfmY02FDagn0n5rbwvCCCo9o51+R
TLSH
T151B2E17C040ADC4CF924AD5E751C3B7B29349AB31FB4A499841A1F09612A0EE1ECB1B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 73KB
SHA256 6dbf4ce8bd7984da3b3dec2833e8107b11b10aa56a537a2e23284cc52a2d9ea9
MD5 86ab42d92e8aaa951eed274da507ad23
SHA1 311714e51063b0fa75cc3854c967f6a1d7ceaf10
SHA512 8272707b178435da9ec5a970dbfc34f76d6b0b0cfbdfa0fcc7c068507e0681318916ec3aecdd2f3227b153a5285bf1a4b9ab367ce2670223a925bee6e56ef655
SSDEEP 1536:moe3GAn1hvFY9yIeaRApCRxZNBo2TePOYqTvPOaYE6meGxfwpw3vidG7:mj1h9rIHApCReO9vWR+V317
TLSH
T1B17302C63DA8481B07FB429B47D08C556C2AB3A5CB7559446FB81C2CFEAA427132E58F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000092

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
Size 31KB
SHA256 778049aa58e82be408431e754ff9419a35a22ecf87f3053a2e1698c2b89e6bea
MD5 05dcdfce442e28bf8f3479c0d86d1bad
SHA1 deb195254a636b09edcb4e1a68701d4ffe7b08e3
SHA512 d3f59c1ab783e8566a9119668e9d6e0dac47c7637c1ace288d3d569f2bbac917a0ac3aa28938e57e948594bb4aee293ee62d44e531f939044c9cfaf48c071c9a
SSDEEP 768:6Gh+tq1WZLg/h+Cs9pBUddjPQWwpNhbPBl/CHQwntsIIJnEgl:6GhKq1WZ0pMpBUbQFpNhbPBlqHQ2Imgl
TLSH
T141E2F24108159EF1FB6ACC05679C5D3EEAE8F200F9D968F8807EA3B4AD66F02365341D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 25KB
SHA256 a2ed66f01753747ce359a8be0a9555b91e18d01c6bccf8e52a74078520d3720a
MD5 7077ccb28e70d467500f6994c16ea6b2
SHA1 b47c8f61db3e92fa3fd0ec2e5021b4ca3586a494
SHA512 aa84c24767a1aeaea11b48e2b8b4d10a9f668839030fe47d132a425dc5cc30954c7d6106ed1d6d1522d42266ff03c0b7be0f1b95861fba79b6073fc9b992ab62
SSDEEP 768:3lBWG2FODWjwQU5xhjsNxSyk879qB8RET4qR19ZB:vMFOKUhSxS1L86pPZB
TLSH
T1FCB2E1CAE9CAB097AF1FB05F48E22D256E77B20EF00AC57647A14DD4657E08345E232C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ab

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
Size 21KB
SHA256 38afa82416af277cd81c454bfb9e4b34560f1b035499564e82c6f66f8b00d81b
MD5 95422876551af36c8358c427a74886b6
SHA1 07708417fb000d6d5af1fd8a33e91c0d388f6291
SHA512 2d3b78f3edc816363a2bc959cb1b767d8c8af8b5efd5fe50746505abc6c8ce99482850c08dd24315f7aba0be970b8b3337b2a75673853b172a3c0bb9fe3e911b
SSDEEP 384:cSfRoG9IThxIv10fRPLZKT7Fj6SRTpD0bJQgtYA0Z6Q5w:LRoG9AQ105PNK5G+8qgtvUw
TLSH
T1D5A2E0D31080C48D6BF3471CAC9B12D8757E0299A74894AC366A9C37E13256DD7BBF83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000b2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
Size 46KB
SHA256 aa101f1ff8628d178bff7b6f8f18015826cc311d416450e8664fe96c12919bfd
MD5 6a364b5c4adc37bee74ad15d3803369c
SHA1 dfad3da90c90505ec2a411c5910a831920fa068d
SHA512 6f76a439f373cee1072264ebeb706df90d627510e8d2b2bdb29973cb226416c08a229523221a84351f0cb453c4600c2a2952b0732e870fe0d35dd2572a827b60
SSDEEP 768:Jljv5ZrBxQTv+99KvdYWJC8mk1th2NfzynIjNkG24uYlPJscwVQiMHv5dUvmDmVk:JBv5ZrBxQTW99Uy8mk170rpt24uYlq2j
TLSH
T1AC23F2CDA7512C43F4281EE7AE6258C792B7D02C790DC84BBEC24753ED5EC25964E90E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
Size 17KB
SHA256 4a48ce7a0ed7db30f7d1c415fc80d53fc18ef9ae9f3a86c8dd2ac573896cc161
MD5 7d823a9bd88242477cbceb91f9130fb8
SHA1 5f5b5a3011719a85c12e9197a954fc0470524312
SHA512 16097879f7fb6bc2bdf0feffa0baede44d76db5ee2364275cebc458fead8e6893b91160cd06968605612de601a9e81ceac07a6f49d9a4f42f154660052e0ef8f
SSDEEP 384:9hKUHh9yHLM/SghgSJ+BoZpuco3AmTEWkAf0HEtf:9hKah9yHI/SUPJ+BoucotTEWkjkB
TLSH
T11382E03F8D117797C02F5943524061B1F5A8E05B38CAEBBE112BA6E3AA33451A7917D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 8KB
SHA256 1eaec81342df99c2612864dd04c1c56854d68f55d39926ddc7ff4b2d46d73cec
MD5 8718e9014b418a3a4ab775716f656c29
SHA1 7c43cab6516d1240c87dc02cda8d74a6ce6092ea
SHA512 a202fd2d1cacf0311a51d8f67cba552069a46462539876c8f67b23e3bfebfd7f64f4a4a9655133ec11a5a634c80d92e2b493045b42afe35ac7302562d11b5207
SSDEEP 96:xyFQD6LN1eB2up1OGRDedp8OJVwgQJVSJlXMaI9:2QD6LN1vb8pguSJlXMac
TLSH
T1C3021CD90ACEA016FF30A631C4DA1B823270B3EA44471F5A47D4AFBF966B3D9549784C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 8c86f878283fb8456ce0e55458838ffff5680a48989dfbbc95c7926b08f55d97
MD5 39aca5f3ae9da4d592a5d3a32c65940f
SHA1 1fa1008c8e53829fa7449be57c9a4efe1cf31444
SHA512 c8fcf834db9c22f2cd5fc00757629711e512f3381fbef2e5a922eae80659c0b55af0b2d26add3fa301831294be48ebcbb8b199b2ebb673bb2e4917fb843bb744
SSDEEP 96:1yFQD6LN1JB2up1oGRDedp8OJVwgQJVSJlXMaIp:SQD6LN1Cb8pguSJlXMas
TLSH
T1A0F11CD90ACEA016FB30B631C4DA1B823270B3EA44471F5A47D49FBF966B3D9449788C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59b982.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b982.TMP
Size 2KB
SHA256 b325c2a8498b245bf5a053dadffd79ed7c915ed3a1d900ec98be6f7e814a07ae
MD5 ae84434e8207e74e9c28044bbc198e4a
SHA1 10076d6370e7352d2b1f0489f87efba84f5be69c
SHA512 840b612294e978fce27f425b7167d59ce9fa9f8c37dc2da4d249e31ec1e82601065f4ee7001ac9454480ef5ca8615c9577f84715a265b519a6cee00bec590628
TLSH
T10C51816D03456883E331BA30C4E92301B432ABFE08174E5983E09E3FE62F7E5894799C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_de.softonic.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_de.softonic.com_0.indexeddb.leveldb\LOG.old
Size 351B
SHA256 0fbe040d07fbf1be06fcca521bad0e9b9a18328f93504f960dc51958b3a0c87f
MD5 00dad2e8adb1d902c9e894f7a29632d2
SHA1 a77d00edd32950f92ada6e1ab3602c7d7077370b
SHA512 fb254165c80a3ab6243770f48554a7f1d59d0cbede74fec4cf6fcc8d09fe4133dc46d12344b537be64fcfee63e06f7cb42870533ab67d50b08fe176167cf5b0c
TLSH
T185E0D87CC4C9C61FB51452A616387F0DE5A7276E968CFD860E88D87478470C4D56E251
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_de.softonic.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 44KB
SHA256 2f9bc91166f42adf971cd76a15259acb0cd929e79fefc92346b9099fc726c0db
MD5 171120bccc8de852ba91c5fde4bd8b51
SHA1 91d517a7c9d4918ee23a505678824e21615a305b
SHA512 5a1528bc2fea5809080c59ac94e8636daefd92214f981feaa84857d8ead2437c7682ba339d2fa51cbd55e69cf500ab956f740301a471481787cb53dbb4e7aaf3
SSDEEP 384:DP5JKjeM3GOK9fe9SwkifMNfrg3BeUWWSXbpe7y1eBBXfJTHe22ehRiJLUPe45XM:cFsQbZW84/nleGzjuJp4QCh
TLSH
T1D0135BB2C7F4666DCD2262F46A663F1FCD6E0914961C78AF89D8BF1653F1030E201A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 a4438f13a60b7b5b2b35c9f29526db712b1787191e84fba1c36e6e36c97b333a
MD5 26590fb575fe69b0709149cef805221c
SHA1 22c66082167b08241451e499a68b1a4a332f5767
SHA512 eddc69740eee2759ca63d2ed85e59e5213882625f970bb76a6f99d7e0a00ed82f83da2d40f019e291099957fdfba10b8e153707972bea937b909a72733fadc95
SSDEEP 192:sxZhR+kR/fAsEk9IdpdxHW6+WN5da/YwthBj7IgUEJ:sxZhrR/fAsEk+DHba/PUI
TLSH
T1D222B8126E38A97B4CCBD21DBA15BF13D2FA5032A1951E58EAFC961C05E6BDD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 744451d919d4fba3d2a432959dc4e14a7d449d37206cc366789e70edd93869c2
MD5 9005da815ed4216f033ecb566f4d4051
SHA1 f67abc841ba341ce83221294c33363c5d61e8b8d
SHA512 bab4a5f6aa33f2a5965c0a39393438520be50fd7d25821917129efcf8725ef927b5bfeb5b2874945f03050276a1fbbfda3b495ee5b56acc589608aaafcda302e
SSDEEP 192:sxZhR+kR/fAsfkWdpdRlEHW6+WN5R1iXYwlhBj7Ig5QEJ:sxZhrR/fAsfk2mHbIXvOI
TLSH
T10232B7126E38A97B8CCBD21DBA15BF13D2FA503291D51E58AAFC961C04E77DD231780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 caa1ad354f543dd851dbc7524e4919c452094108fc31fb2bc6577f969cf9cc2f
MD5 2d508d56990c33f140a7c371f2cac92f
SHA1 93f0fd17d0b27c6be899d9b0445aca310511d35e
SHA512 a4c35c05d9d1749fee4869df402de7f18efb0f0f940b28084140016883bf77374346c9e28f43082f59a287f3064eb124586ca0daae37f408160576cdfd375e78
SSDEEP 192:sxZBCR+kR/fAsfoNdpSJRlEHW6+WN5ji2uq1ilPc/YwKdBj7Ig5+EJ:sxZBCrR/fAsfohLHb4Za/e4I
TLSH
T18E42B9526A34A97B8CCBD21DBA15BF13E2FA517291C11E54BAFC9A1C04E7BDD230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 8bac0481c129d086ffa27d3a483f802e82efd2d1f55cfd57ba595592b585df86
MD5 54e34d5d4b0d61f6839389b45a231444
SHA1 8fcec0e16d47715a8462deccf9f76b9166ba1999
SHA512 f04ea96a12bcd0a37e2336045e127b539b4288b95e19e1e84e6eaa4aed56d508f70d0e4d952b251cf470b929f6bf1de26e4826ebb5b09e8f91d5b279a5673903
SSDEEP 192:sxZBCR+kR/fAsfo8dpSJKlEHW6+WN5jU32uq1ilPc/YDWcKdBj7Ig5+EJ:sxZBCrR/fAsfoMsHbQZa/t4I
TLSH
T1CF42C9526934A97B8CCBD21DBA15BF13E2FA517290C15E54ABFC9A1C04E7BDD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 be52423d89091ac01cc89c59a7a35b056020bc764166fba1107cd5d4f238d84f
MD5 6acd0aea3b6177e80d84d4e29a793b82
SHA1 23170638a0246ceb5dec817b77e88c9d8abb2c72
SHA512 e822f2116a8d78b7dd98b0bcebbb96d4a4fe126949414efb31847a25f61b422becc341885dca1a739932830f4592dc412791c7c8f3b34882c04d3b0d58edf16d
SSDEEP 192:sxZBCR+kR/fAsfoTdp4JCslEHW6+WN5jU3eMQ1ilPc/YDWccCQj7Ig5+EJ:sxZBCrR/fAsfofX5Hb2va/R4I
TLSH
T19E42C8526934A97B8CCBD21DBA15BF13E2FA617290C11E54ABFC9A1C04E7BDD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 51a38a120ee603eaad463fdd0e8c8691f07555babcd9c445cfa47a8ffc96fefc
MD5 18a062c9ffc7a8cd43e2f7e3cd4fcb9a
SHA1 af15ba7420a355527e3d13646a5bbc0ca2e8e8a9
SHA512 cd48b41d7b3938b062b46baf012501a73349ae97d3e499c083bfda85e4b73905911931bcb47d77f12dad68beaeeb48d50c657d6087472248f53cf999db8c2657
SSDEEP 768:dTmjYDmWvmKyE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVBPLlrZ+Dirof44aE:dTmjYDmWvmKyEu1jakPLZQD5gw
TLSH
T1FFC2FB3B244CCF7E4FC41A9DDC5A6F973EA802C7AA588D4047FA954C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 250eab168ae478518b741db35c324d3553a00913dcd23cce8e8f3af48675855a
MD5 6d8c4351eade763400b12fcd6e46cbbe
SHA1 3376765de6f0cc4239a388bcb759812f93292734
SHA512 bd5e8de415e1d88b84efc3066332f051fb9f10801868ec4f8070ffd33cfcc903a4e37a6ea0e3923707320d96e1c35490c2c2295d9fd37646066dd60239beed21
TLSH
T15CB02450CC1050C3C04D03F044444CC431140C101F41013D00F41C5CFC551C14107357
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595615.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe595615.TMP
Size 48B
SHA256 2b3057b94831efd12650ae1801cd268c50b7b73eb00cd0eb33e6a19509686f0a
MD5 f10259a554f72d4a293385bab8518d27
SHA1 4fa8e0ea0db03d98a92ff410cc1672b7f70454aa
SHA512 4ec79dfb7e6581b7d36ad7a30f3b1fee3062d2bd4c403b32babec6c16d6f91de6e46217b984bc1520f5eead3b573ee5f803247d788a7dabd0cab4b205d241110
MD5 SHA1 SHA512

Submit Download

1718e3c25c7871d6_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\1718e3c25c7871d6_0
Size 63KB
SHA256 fb462ba8ab12f99da59e670ca719292f3f26229f1f608904450577781879d457
MD5 8264b87cfcd3cb7a258a5e52f6be7098
SHA1 fdb191fa7bdf96ab9c0f0c3868a842dfb12b1bcf
SHA512 a70b4f3bc9d19b8c60d48d3ccc5f1d36c5a2a2ac2e4a3674506dd77a815b1f022473c0d37f631ecd4635c24467e5b08af11f1d8eef6fd822ebf7ea8d984f9e25
SSDEEP 1536:J8k3vI6lZbRXxyqxn4Y473+KrYF03iRNjkv:J8k3vFpxh4Y473qW
TLSH
T17C536BA6337178B3427BA1B1906F130B713EE5A7F40484F8A198EDF45E54AA60267F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca24060f950e0f09_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\ca24060f950e0f09_0
Size 63KB
SHA256 3dba31cd057c351b02d704079f81b7410cd3511102efc0e4f7e4feec6b6bb865
MD5 e9d92267ec8bcfcb846c3068550287d7
SHA1 d2a64d99553c27838973354d14c82193691e5736
SHA512 c8aa9d5a8a8d5debe66e303fa89f2c5f00441e186589d54c29d9c65e594098f8be4440e90ed445c2738d641879d07e564453b25b49bc32f3253ca099afd2b840
SSDEEP 1536:+8k3vI6lZbRXxyqxn4Y473+KrYF03iRNjkv:+8k3vFpxh4Y473qW
TLSH
T144536BA6337178B3827BA1B1906F130B713EE5A7F40484F8A198EDF45E54A960267F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 9baa21e8a0b0d346b77752a5bd01f2aa9bf98133456982fdef27623349882b57
MD5 a0aabc454d011a3980103f0a2a5b6e0d
SHA1 21a772e1f8aa819606625945b05bd266a7b802bd
SHA512 c6c535d41863163a5a7867d5b86189e99be7af24ec58f62ae67a3160dee74352c6227811be577873612b944a73238a487d7a65be3d9d46ceb90674826e1e377c
TLSH
T182B022C08088203EC0002BF33AC0008033200C30032F8E822CC00CAC8A0C2C3A8CA220
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 2b0dbb8c5c91f3a6e4cd8c7b160b3e9f9a96f7b6f71fa747142801c68cd18faf
MD5 e1dbf7ca7f42e2d2d06afa37d8c7e518
SHA1 12fe6051c6a612493b67b7f33836395725959129
SHA512 e7abb722ce10c9e80af13f3245c0eef4c17b85733a164181b526fbe08b1e4a7294c08c17a774ea009ca47f8721b68d31b2f101a3e3a60fc2072d1e7792bdd299
SSDEEP 48:K2hctBzTDy17eBIkxyKH3fnybxiqWPB7yZQIbKhqMxpIdKaggnylY:KEG0KXqSqQ4KhqSpyKagqOY
TLSH
T1CF91F38574BA42113D3E3B1D8665CB268A8276633414F43B3BAD42760EA7E11DEFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e8a6ccea-8cb9-438a-aacf-d5e471b9e6e6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e8a6ccea-8cb9-438a-aacf-d5e471b9e6e6.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 cbf8969d1bf56117ff8fc650ea634d9f7edc28cb700811808e6570c321ad7101
MD5 de3fede2a8a1edabbbc168307d3b55d3
SHA1 fd17a760553f5287c16b3b5e454a7989982eef6d
SHA512 a8ec6755818e4e20873bd89b3a8db5320f54c0efeb97f7a09f5d034941394554b815500c36717bb784430be5e75ff8e7044e7e3a63a36724b7f04bd2743cb989
SSDEEP 384:CZcIhsNjrQzqMoolf+9OMYDuF/46HlytEDq1zWo:wh7FoO7g/4oy6DqZWo
TLSH
T1E7927D31597898374DEBA515F88B35138FFC9123A6E46FD4E6EDBB1C00C96AD130B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 407f419c876f920fecc749d6a51d56a1db269cb50ca8dbb7f40b13efa75b243c
MD5 36a1bdd8c679a202b3667c58af401f99
SHA1 63d4a9611581451db98b3ed0ff350d69cf84d360
SHA512 b24f98b6489591e04e3a00b801d39b0b1ef26633942e8cda12f002e2fd0148485cb20552062fbb1ffd4770fa6bc7a4aee9c900e5571e4ffa547464a3dfeb9ad5
SSDEEP 192:EOND6hZ0QmiUy+gpc/+jVfO1SYo25wOZ/VJL0U6:EOND6oupu+9OMY42/X0U6
TLSH
T12F02E93568686C778EE6AE45F48737235FE4112BA9A56F84DAE81F1D00C779C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 eaefaa115daf3ef8d29f57fb8f050d35bdff7ce3808c740dbc5332e12dedc134
MD5 34944fa9675e4bc5bd26a96b60799cbe
SHA1 7493fcfb72f663048e7bd27e9d406a1c275c8108
SHA512 8b2dc33e54b7536c9bc1f2cfacaa4e6445fb6ea426c7183613822c05b3dcaa8515a731fef495bd2d2e002db1d74af93cd31ea3d23b153657f77a758db0469b3e
SSDEEP 384:jZcIIsNj2QzqMztO2f+9OMYDuF/46HlytEDq1zWo:7IqOmoO7g/4oy6DqZWo
TLSH
T1FD928E3159789C374DEBA515F88B39138FFC9123A6D46FD4A5EDBB2C00CA6AD130B825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 278be6df516775ba0bbb5d3e806973e34f339feffd941553a0fdec54e416df2e
MD5 b244a9fc90fe4c2343073190d5dd48cc
SHA1 22adbda804d0504fe0cf5817696619bd205a98fa
SHA512 7d98970e1a37257d5b6e7c04d17e5ae2e8e5d4f222ffee6cf9e2de3c5c5d065e01227e6ab6a9251146f0c7a5489ff0952fb4a93b30ae142748c16a7b39dcb77c
SSDEEP 384:fiFiZcIW+sN98TUNTUlIl2QzqMzGO2f+9OMYDcF/46HlytEDq1zWo:qFQ7YwgoOmoO7a/4oy6DqZWo
TLSH
T163D208F245E78436D9AE5707E77E2D138EFCC163B590AA94B7985A1CCC861BFD30A810
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d249cf7c9a5aaa4839067c321da32ef8e6b5ecdf3d7a82f969383665e3e68de7
MD5 97f5fbf45427ff03655625ed4c8f27a5
SHA1 e4c4e7bb80d9af7d3f8ecd1070aab9528cec354c
SHA512 43222cec5356f7ffcd8e0eb6c43e5e722436c1c5f0023ba5c49de2b7b18e5ed097d4993b9233024a19364fcf62eeb7baff1a052620af44e1af615ae7581d5f29
SSDEEP 192:0JONW6hZ4QmiUy0gXc/+jVfO1SYoQIeN5cOq/bq3U6:SONW6sKXu+9OMYDs9/4U6
TLSH
T137120A316868AC374DE2A555F48736139FE5422BEAC57FC4D6EC3B1C00DF6AC230A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6e46496ff92edb7bdb287b2c08ba0f6bc4c5360d56bef2d4c318a10075b7c387
MD5 fe6eb7888f132a12a3ff591e520d4dee
SHA1 5fdb3177802ce11f61f48dad0032ec4cbf219f97
SHA512 db95024a2ec0b11266de530a77c25b3d213f2cb0d0157aa586eff8c213c2386cda98b6268fdf70f71e185018ccb6ba8ac77486d94787aa2958e54dc672092e6b
TLSH
T154E0014BA30100EED02E233140C31B6137F7813053B303669E210A7C6D173005E32B90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6c3ddabb987b0156fb65f6eef8c1b66918f61728740b1bfcc480acbdceb723f7
MD5 e0bc86e2212ec42b7f3250fcae276a69
SHA1 3be62818273ac0841eaf8a1a48c958ac07c526dd
SHA512 2f2c817af2eab43bf57307aa3e0d25a438873fc667c7cbf8d6fa7bdd59aeec38015fcc79732adc6b1de08fc47123c31ef2480916e3db511f8506952e5cce0c27
TLSH
T1CCE0094BA30100EED06A233140D31B613AB7813053A302669E310A7C6D263406E22B90
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 11ecba4131a307c090e6a4660f03a5870193a66b7571d49400ffead73098a7cb
MD5 cfa39c2abad2641d5e58253efabeb15a
SHA1 6f5d6b063d12ae27c918184992271d55584147bd
SHA512 e4deca64c512072b3efd00aa0ad086bfd4fc1c28080c076e7014d1e32a2cbddb1f814c3e0a9b4b0287a9cf64ab93036f946cfc7a25ecfe02f8250deae2015297
TLSH
T133E0024B530100FDD03E23314083177123E7813052F203669D11066C1D072004E32FC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59041d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59041d.TMP
Size 392B
SHA256 e4ea955bce54f101fa53ec4457bb401a61d98ba2c262ae6199f0367f5e60a30b
MD5 4482bb4d970151f26d602febc35dd162
SHA1 fe7426d1f0c20d7747021c5116d23daea73bf42b
SHA512 5a838dc7dd2a314486d2e54cd130b999347100ccf5da312ce3d592f88d2af6e7bc11fe4341eb02998306569e8d6ef67073bcaeb3a87d0ac4535c4093e61c431d
TLSH
T148E00246530100DED03623310083177027A28020125203669911066C1D113001E216C0
MD5 SHA1 SHA512 TLSH

Submit Download

3f454429-51f8-45e7-a813-120ec6344fb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3f454429-51f8-45e7-a813-120ec6344fb6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 98a382f88845678cf235eae2b6801288c7ba0c74f9dc5dfa32630a49a53212ad
MD5 26ff61c2e63d7a9a33fae0ce33a8c8ad
SHA1 ee1c4add1d13876993f1dcb4d00310a7d64f902f
SHA512 6f1139aabc6e9bb75c3d804104922a70c27762fa5eafaf9696b50c8497355a907756c1b2258028435a874bf2973558de0206b60faedf518c22abe309d838b71f
TLSH
T185413B58A6F91148B3B37F5AABF668AE447F78272E0AD44D10110E8E0663B40C5B2737
MD5 SHA1 SHA512 TLSH

Submit Download