hxxps://www[.]scribd[.]com/document/982787057/steam-acc-part2

Analysis

user interaction
yes
max time kernel
149s
max time network
156s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.scribd.com/document/982787057/steam-acc-part2
Sample260919-pg53vsbr5x

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4784	msedge.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134342939620545662"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{E08E3C6F-CADA-4053-B503-8D78DD341EA5}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2564	msedge.exe
2564	msedge.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
808	Process not Found
808	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3608 wrote to memory of 3256	3608	msedge.exe	90
PID 3608 wrote to memory of 4748	3608	msedge.exe	93
PID 3608 wrote to memory of 4784	3608	msedge.exe	92
PID 3608 wrote to memory of 4748	3608	msedge.exe	93
PID 3608 wrote to memory of 4748	3608	msedge.exe	93
PID 3608 wrote to memory of 1584	3608	msedge.exe	94
PID 3608 wrote to memory of 1584	3608	msedge.exe	94
PID 3608 wrote to memory of 2820	3608	msedge.exe	95
PID 3608 wrote to memory of 1344	3608	msedge.exe	96
PID 3608 wrote to memory of 2820	3608	msedge.exe	95
PID 3608 wrote to memory of 2820	3608	msedge.exe	95
PID 3608 wrote to memory of 1344	3608	msedge.exe	96
PID 3608 wrote to memory of 1344	3608	msedge.exe	96
PID 3608 wrote to memory of 236	3608	msedge.exe	97
PID 3608 wrote to memory of 236	3608	msedge.exe	97
PID 3608 wrote to memory of 236	3608	msedge.exe	97
PID 3608 wrote to memory of 248	3608	msedge.exe	98
PID 3608 wrote to memory of 248	3608	msedge.exe	98
PID 3608 wrote to memory of 248	3608	msedge.exe	98
PID 3608 wrote to memory of 3228	3608	msedge.exe	100
PID 3608 wrote to memory of 6136	3608	msedge.exe	101
PID 3608 wrote to memory of 3228	3608	msedge.exe	100
PID 3608 wrote to memory of 6136	3608	msedge.exe	101
PID 3608 wrote to memory of 1848	3608	msedge.exe	103
PID 3608 wrote to memory of 5808	3608	msedge.exe	104
PID 3608 wrote to memory of 5808	3608	msedge.exe	104
PID 3608 wrote to memory of 5808	3608	msedge.exe	104
PID 3608 wrote to memory of 1564	3608	msedge.exe	105
PID 3608 wrote to memory of 1564	3608	msedge.exe	105
PID 3608 wrote to memory of 1564	3608	msedge.exe	105
PID 3608 wrote to memory of 3232	3608	msedge.exe	106
PID 3608 wrote to memory of 3232	3608	msedge.exe	106
PID 3608 wrote to memory of 3232	3608	msedge.exe	106
PID 3608 wrote to memory of 2872	3608	msedge.exe	109
PID 3608 wrote to memory of 2872	3608	msedge.exe	109
PID 3608 wrote to memory of 2872	3608	msedge.exe	109
PID 3608 wrote to memory of 4764	3608	msedge.exe	110
PID 3608 wrote to memory of 4764	3608	msedge.exe	110
PID 3608 wrote to memory of 4764	3608	msedge.exe	110
PID 3608 wrote to memory of 4984	3608	msedge.exe	117
PID 3608 wrote to memory of 6048	3608	msedge.exe	114
PID 3608 wrote to memory of 3268	3608	msedge.exe	116
PID 3608 wrote to memory of 4572	3608	msedge.exe	115
PID 3608 wrote to memory of 5904	3608	msedge.exe	111
PID 3608 wrote to memory of 2640	3608	msedge.exe	118
PID 3608 wrote to memory of 2136	3608	msedge.exe	113
PID 3608 wrote to memory of 4984	3608	msedge.exe	117
PID 3608 wrote to memory of 1368	3608	msedge.exe	119
PID 3608 wrote to memory of 4984	3608	msedge.exe	117
PID 3608 wrote to memory of 6048	3608	msedge.exe	114
PID 3608 wrote to memory of 6048	3608	msedge.exe	114
PID 3608 wrote to memory of 4624	3608	msedge.exe	112
PID 3608 wrote to memory of 3268	3608	msedge.exe	116
PID 3608 wrote to memory of 3268	3608	msedge.exe	116
PID 3608 wrote to memory of 4572	3608	msedge.exe	115
PID 3608 wrote to memory of 4572	3608	msedge.exe	115
PID 3608 wrote to memory of 5904	3608	msedge.exe	111
PID 3608 wrote to memory of 5904	3608	msedge.exe	111
PID 3608 wrote to memory of 2640	3608	msedge.exe	118
PID 3608 wrote to memory of 2640	3608	msedge.exe	118
PID 3608 wrote to memory of 2136	3608	msedge.exe	113
PID 3608 wrote to memory of 2136	3608	msedge.exe	113
PID 3608 wrote to memory of 1368	3608	msedge.exe	119
PID 3608 wrote to memory of 1368	3608	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.scribd.com/document/982787057/steam-acc-part2
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ff818f7c188,0x7ff818f7c194,0x7ff818f7c1a0
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2088,i,17464458266596248225,9102910634995011022,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=2976 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1972,i,11760584323713777473,7983364776493310036,262144 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:2
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,6844822074424664451,6895500153956774135,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3272 /prefetch:13
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,8607972534239775534,6464979601489042047,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,5387674509862232737,8417064201013084973,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,8178998614687290936,4120735836981517672,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,15200053804179601581,1952270404044361259,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:9
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,3999679991779427460,7927690339993829892,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,15318837673130927012,10914548002840579180,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,16630233419110191694,15596795635585236837,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,16630233419110191694,15596795635585236837,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5960,i,2998915221941019654,6857809892582690020,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6308,i,17893223049424762421,13028188115221900719,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6160,i,1275896443246363474,12022474197334487099,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6892,i,1651229425845345211,15794266208850012101,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=6916 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6108,i,18423498129605369568,16012757782582213304,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6120,i,10245320141061872848,2175601786141361477,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:1
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6112,i,2617960026119766830,10052033636412417959,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6088,i,3238177913178575065,10277609137527930835,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6140,i,15600431816321836331,10785618669934488382,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6080,i,7916942913862255104,18303497664425977285,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4776,i,4027712416468329381,15163168227569686968,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=3756,i,11828316715691641256,11369629536080237875,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=3692,i,6462275709388544289,12486494776016992483,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=7156 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7208,i,16692323159553834845,2953645724834267219,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=7408 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=8364,i,11330211396661217054,12516605079796023850,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=8420 /prefetch:1
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=8400,i,17896546780868858956,4863028252551931633,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=8544 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=8576,i,12703294534806600250,12299800476651719166,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=8760 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=8716,i,64795170708648799,8640997378191836282,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=8756 /prefetch:1
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=8564,i,2268556046263508040,11261851824632775119,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=9316 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8580,i,2401212303138478853,8185405976518144092,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=9288,i,8006021856775349458,17621892984615784382,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:6140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=9284,i,7315299051677977857,6458403197093755399,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=9296,i,7588495314263897968,6226402920308613133,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=9256,i,13626232133114957455,15768647096640903615,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=7772 /prefetch:1
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5892,i,15155372333328613004,4992189584150165654,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=7252 /prefetch:1
  2⤵
  PID:6352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5908,i,4354136105036394245,403494281961005895,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=9352 /prefetch:1
  2⤵
  PID:6360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=9796,i,1680200305824544247,7105180330127889539,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=9820 /prefetch:1
  2⤵
  PID:6416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9836,i,6119479712053576661,16387804346635173260,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=9944 /prefetch:1
  2⤵
  PID:6424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=10140,i,10823109491622497345,16953229682185900846,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=10124 /prefetch:1
  2⤵
  PID:6532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=10280,i,16598521805298046853,13969451343219159369,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=10264 /prefetch:1
  2⤵
  PID:6588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=10432,i,11227226340714065713,6453506931096819511,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=10448 /prefetch:1
  2⤵
  PID:6608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=10296,i,9573185311187525056,15631971717668301892,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=10584 /prefetch:1
  2⤵
  PID:6620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=10140,i,7701309689481621250,4772631726439069224,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=10708 /prefetch:1
  2⤵
  PID:6712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=10812,i,18067479234615528862,1282586696776722213,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=10832 /prefetch:1
  2⤵
  PID:6720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=10988,i,19683116158012990,16429125653910184720,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=11020 /prefetch:1
  2⤵
  PID:6840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=11172,i,15681245542654832218,17168473530633442228,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=10968 /prefetch:1
  2⤵
  PID:6900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=11452,i,11548053552733167635,9990921860906950098,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=11448 /prefetch:1
  2⤵
  PID:6960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=11684,i,11257768232132599900,17152762646484944000,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=11700 /prefetch:1
  2⤵
  PID:7020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=11896,i,11297186529679302762,4960222334805663916,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=11888 /prefetch:1
  2⤵
  PID:7088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=12216,i,15603288849489872834,9058240670798584580,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=12232 /prefetch:1
  2⤵
  PID:7148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=12336,i,12585474085618127605,18364873966114570091,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=12696 /prefetch:1
  2⤵
  PID:6160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=12828,i,10037803746779714707,12524542192187354543,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=12848 /prefetch:1
  2⤵
  PID:6148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11460,i,14696959665890651223,8561251126572378825,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=11752 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=13064,i,9570341867402857282,15913201961834179748,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=13076 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=13216,i,4649197328089573385,3424511194630516165,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=13240 /prefetch:1
  2⤵
  PID:6908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=13428,i,13811475267451242579,18039042360932577611,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=13424 /prefetch:1
  2⤵
  PID:7192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=13572,i,1796229423911518332,4627744569730237084,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=13444 /prefetch:1
  2⤵
  PID:7204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=13132,i,15389139372313000472,9761090027514894031,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=13144 /prefetch:1
  2⤵
  PID:7308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=13720,i,3875520634026562767,13458285436043387483,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=13876 /prefetch:1
  2⤵
  PID:7372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=13996,i,407454156163759748,9560809386002536596,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=13992 /prefetch:1
  2⤵
  PID:7432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=13984,i,12882344106894368567,3497434158674624781,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=14152 /prefetch:1
  2⤵
  PID:7496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=14180,i,3260624106652072006,6162593999340171670,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=14268 /prefetch:12
  2⤵
  PID:7516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=14564,i,14090268168640729534,5568404002472660937,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=14568 /prefetch:1
  2⤵
  PID:7628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=12544,i,7121075205214604616,16472635718112434164,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=12360 /prefetch:1
  2⤵
  PID:7800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=12420,i,12593985999503649093,12804973885708550209,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=12680 /prefetch:1
  2⤵
  PID:7924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=12148,i,9697091296575031456,4443425466558917380,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=15312 /prefetch:1
  2⤵
  PID:8052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=12028,i,7730314424365633081,11450223774486159689,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=12548 /prefetch:1
  2⤵
  PID:8124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=11424,i,14528653138868678747,1412669339475767338,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=11408 /prefetch:1
  2⤵
  PID:7448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=11500,i,11475958787937362741,9650674954029781766,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=14724 /prefetch:1
  2⤵
  PID:7456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=15480,i,11057844472873288263,8595043839063520749,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=15524 /prefetch:1
  2⤵
  PID:7864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,12231338057439362051,10693632820026006435,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=1244 /prefetch:14
  2⤵
  PID:7956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,493208222886804113,7971543454615355140,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=15352 /prefetch:14
  2⤵
  PID:7972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,4656589385038660983,11557212611766648404,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=15648 /prefetch:14
  2⤵
  PID:7936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=14712,i,17722494480131845280,8415846414600114929,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=10264 /prefetch:1
  2⤵
  PID:8356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=1420,i,14167595270541280722,2454012216834214447,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=1416 /prefetch:1
  2⤵
  PID:8416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=15944,i,8971663990701432007,8990660347236911502,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=15960 /prefetch:1
  2⤵
  PID:8424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=16140,i,13187180146692381944,10457052666547207907,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=16080 /prefetch:1
  2⤵
  PID:8532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=16308,i,13518744089814272292,7520770082706741203,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=10120 /prefetch:1
  2⤵
  PID:8664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=14928,i,18015973003987050812,989673154349294730,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=14948 /prefetch:1
  2⤵
  PID:8724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=12156,i,14108186909315117999,9269738722832421892,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=14936 /prefetch:1
  2⤵
  PID:8780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=14888,i,11222083471686681319,3296482475119351875,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=14780 /prefetch:1
  2⤵
  PID:8836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=15480,i,5553993240580080326,17083960343005156858,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=12632 /prefetch:1
  2⤵
  PID:8896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=16568,i,17191929061158604034,3945037546972214985,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=14832 /prefetch:1
  2⤵
  PID:8952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=16304,i,12251761792154800949,14417329494733437787,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=15132 /prefetch:1
  2⤵
  PID:9008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=16836,i,16813484296337915525,1401727747653685347,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=16840 /prefetch:1
  2⤵
  PID:9064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=16988,i,12399994098859797821,4844692946167549382,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=16964 /prefetch:1
  2⤵
  PID:9120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=16276,i,9386264426004150821,14465401997875084967,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=17168 /prefetch:1
  2⤵
  PID:9176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=17252,i,673006791213477054,10059561671699567191,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=17272 /prefetch:1
  2⤵
  PID:9184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,11882162794411718743,2587325191236160875,524288 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=16420 /prefetch:14
  2⤵
  PID:6156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=12832,i,11667389863265073396,11336377907112652165,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=13296 /prefetch:1
  2⤵
  PID:8088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=10124,i,11933998625139666665,11965391330239230424,2097152 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=9116 /prefetch:1
  2⤵
  PID:7688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=9328,i,5515049255965848434,5319295542702836658,262144 --field-trial-handle=2936,i,6498274011824656268,3868578910819135709,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2564

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2872

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 355a29997d085f70c135b61fb8e48fe3b3d9b6030190662c9d930bd533b88c78
MD5 5121c8953b32388eb96bb70d0d12fd00
SHA1 e62d74f75b188deb1ec8b8dabcff7c16e7ba9ba5
SHA512 c8f0ff682c9ed7e02559e599a97078b0a2e39f928b301598e0196d5d9dd6ffac13da9bd34262b0120793cb2472ac6c7a93a178d4abcd0a5a2c6df1e9a193de10
TLSH
T13CD02BF4528C9C63C4CA30740425458100263401B948D2903501478849401B914433E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 97f58c0ff1008d9a744980b06de74b1bc42fdd2408c0871566ecacc80738c498
MD5 ffa34db42a6c31e411546fdfd8772d96
SHA1 cd3fa45407492f90d8b070cf009147d20a8b4151
SHA512 72fd2a1188869d257eaee37d23569752bb0744ad1a5cad19b6a4b2e60f4d5f74f1ccf0a0b24a6e31d4d512e939f7b384fb86433ec7496296acb712e8334d5e32
TLSH
T18BD02BF0529C9C63C4CA307804264581001634017548D2903601878849401B914423D3
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000b7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
Size 95KB
SHA256 e3276962b19d1418c00630513f1cfa2adce7b1a96be9978c82796be89e9ebeb7
MD5 45395d11ee3be5cda7a45d0dc352f914
SHA1 7ead4d4061f5902ac3774dbca671451d3930bb0f
SHA512 8d138e0d169fbedf6c8b8370674a2334d067ff66657acc566ce18e5cfcc956ddb9a9785744bd2dd66b3646cde51b421367c99fe630f36fde6ed3b150fb3466d8
SSDEEP 1536:Wq7QLTzidOAeemCUIJpNx4V8wn3nSnbg8PGpVjidVHBB4grYba7YbskgTmwRAR+9:j76iEe/FZen3nSbgyoVwVhB4gUXbSTX
TLSH
T1ECA312DC66D958B7DF7310CCC3344D0C2A0E96D15D2AC5BD6282DFA120E21B0AE2C57B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ba

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
Size 284KB
SHA256 68fb295f94305c3be0a630bf3580bd7ab4bd3d787303fdc87a76309c0fb2fca9
MD5 a5da9618f3b0a572cf3de69e11326740
SHA1 d668fef52115d652413f879f2fcba6f10ce7fb0c
SHA512 cf6470958edce35562013f7d511bcf913936a79600129641cb741784ba0c5a8d5433f4dbb721d3adfacbd3f27678124c8e7c3e9a082ba8cf843fecbcb79b8a2f
SSDEEP 6144:KRrBQjKaFvJco2g132h5Mqac93qM+IiGbx4SvwFG0u4G3eRU:UrXaxJcKh2h5MJbIJlSByuRU
TLSH
T1295423258B2C5419C6620F3C6B0A9F21595DA5F6B117FA17A19D4E30FE31ECA538B20E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 cd4ab370a2d0e265544e37167af1bee8df05f11cfcdf97f783018861181f4f63
MD5 d0b14383656a553e61bf82f8e9b4f41e
SHA1 2a1af693f2448f5381832aee0dd682fc6a604f28
SHA512 1e01848027a55db3a36e69de04f787a3ba631739a0befb5520848f2785610e91f9bbda7074b6736d37de65a4fe3b768a1032ca938d8a70e95c4553b4146ad6ae
SSDEEP 96:QR6in+kXuFlhwRPC1/IyeK1BGsp+CIaqLN6yrWaMp2Gf9NI6vVRZh3F3ciPnnzfB:0B3o6tNI9bSEgu/uyOAzFNp
TLSH
T1F9D10D5966F0421AFB70BC74CAC2ED8ABE747A4D1D5BCFD2E99AD4B0450634FE8204E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 065ee316046501488f52f6b356ed9cff2f3b0cfcfa0ffd6844d876debfe33fc2
MD5 02d1a3335e6980cbd2df7d59e07b90c9
SHA1 ea95202a865e9d5e3588dd9cf1997d2fc2bdb328
SHA512 65524b71c7b5990c333252a712ba30887626e090c6dd063054de4e3edbe405046d5a079ba2b4c1b399090f359a7f5e327d47e07d082ff14ff4d405b06d09770c
SSDEEP 96:4R64CkXuFlhwTPC7dIyeK1BGsp+CIaqLW6yrWrMp2Gf9NI6WRZ83F3bOnPf8EhwK:c9NA6tW9928u/uyhAzFE5
TLSH
T186C1C945B6F0420AFB60B974CAC2DD8ABE703A4D4D1FCFD2E9AAD5B1950674FE8404E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59b934.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b934.TMP
Size 3KB
SHA256 6435fbb246ffa601dc993ec8adf01acac90a3a420ca1c2096093c270dc05b999
MD5 c269eb7ea263d4ca5d0c0a4d89e27728
SHA1 fcca7e7ff0f64fbac2926b3ae527b33ba15c9c75
SHA512 c0647a7af795f1f618f2806f7c2b1adb3c69f85bd56a797cbe0a434a9afb4aa6f410c4aef29b0a889343eb6d62b4f295214a17593e122eb9a01a565523612abc
TLSH
T1B3614C8276B5864EF7B88830DAD7DDCA7A30BE94408F1F2225A4D8F19849717FC940F8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 120B
SHA256 4faecdd32b6f7320b50e965431b9248626e75eafd15a9a629f5ee535d42cf45d
MD5 60adf9755a925ef4b45bcc279b65ba5a
SHA1 ce55533f6b7fb27ee63e9c02fafb622e944ab649
SHA512 cb2f5b18c8d6c5a744cd155307e19ee18c90af9fb6738d21b28c8ff81b004b7595aacac17026bf02f4f4015414050bd0f2667c6e6eebce5c09a4f92fb1b2ca9e
TLSH
T146B0926400510A05CA0022716BC1660465A5083CA125C3C3A8E642A8D527ECC88034E8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.scribd.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 51KB
SHA256 5f0dee64b8d33acdff2e267f45d585cbee54fbed3a37509aa80bd7d09fa15033
MD5 3b6cc383ffa4a33689e97947ade7c3e2
SHA1 0121e6a755b142bddea95fd5722b180ca3cc5187
SHA512 149e28325c243f11c04e9c0019ecab5261b6d91dc3fe5b4bd66ae95820c90ccc199b054cb8474552d9e3112f4868d2060afb8f059f04ca158ffe31b17b7075e8
SSDEEP 384:DmI9vLxd1VJMrJtFhXeqFeNEe8eb84fUJ0lgM9wobFnre8eSBeeLJ9un84he+eW+:isjp78Cln9u8b1UJt3fOexq
TLSH
T17133FFF387F4827DDA2165F16A646D2BCE6D0620471C397689D4BE07A3F2571E202B2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 5872639a6cbcc4c84181905aac9ece3494302d9b4f823237285138495e284f9a
MD5 cf7f3ce8286abf4d18f15bb48ea358b9
SHA1 7dabd9ae0f4ee449fd00baaa459e918f4480453a
SHA512 3e791cf428d2af631b733ef02f52b331a96e537625ef3d8f176064c3561a0989befb3c68e452afd2b0050ce221d0e34ddaf77b069b05710da574533f8204b142
SSDEEP 192:sxRTR8bI/fEspBoA8pke/g6+WNxqVL9YthAGw7vIgDWJ:sxRT0I/fEspoD/5W9h+
TLSH
T19C32B616AD68A93B9CCBD24DBB55BF53E2F91032A5912E48E6FC871C14E76DD220340B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 01af8aa565bba989a5d08d80e2230a2e26e8548c6c27877baf610fafdac82a88
MD5 fa6b98d852386198955a51d6fd895570
SHA1 def59c4034e8a4d4ef95e8ea5964cf852c279299
SHA512 79f9e3abb86b0ae05d23200e0bef2f052e7640237c24f7f6cd8c7249ffea7e1260018ca8e70c647566f2a4854d6305fd0b9acfe050c950a5a6816974fde5b574
SSDEEP 192:sxRoRXbI/fEsV1zoA8pyX/g6+WNfPs/YteAGw7vIgIJ:sxRo1I/fEsVY8/5M/0s
TLSH
T1FD32A516AD68A93B9CCBD20DBB55BF53E2F91032A1952E48E6FC871C14E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ee4030f88511a4ec7cf022c742579ab789d188b8cb8c9ccf0211d358a7e44c1c
MD5 199df0747e471a3b32bd19c2fee5fd61
SHA1 cce843192b36b62515d3cc1ec555823aa9202485
SHA512 4bbd581bddb98b5fb55c5c929039d905735ff84a5506243eb45cb7ba8ebda70d00f7579d6448f60bcfaf630ef715e00620cb1edc06a439ce75b55d39e4527b00
SSDEEP 192:sxRTR8bI/fEspOoA8pyX/g6+WNfXQZYt/AGw7vIgDkJ:sxRT0I/fEspF8/5IZTk
TLSH
T1A532B6166D68A93B9CCBD24DBB55BF53E2F91032A1952E48E6FC8B1C14E76DD220340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 29512766d993005cdc5d63e425b6c22592bd381862093a4ed66cac2cf8718e41
MD5 c80f15baf6f8c1bf79adb86e36f18be6
SHA1 45a5447de64ae530984562fa4358e8f4a9f3813b
SHA512 bff37dcbecfe192f44443ac83d33f77c8d42a3d5986b87f88ca35f085114b55f980515f7982eb681545e621041a4c837b3d9e6f24a8e10ea1cb9194265248bc3
SSDEEP 192:sxRTRXbI/fEsoOoA8pyX/g6+WNfCN2OXYti4AGw7vIgDkJ:sxRT1I/fEsoF8/5YXnk
TLSH
T12F32B61AAD68A93B9CCBD20DBB55BF53D2F91072A1952E48E6FC871C04E76DD220340F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 c347c6ab246e52c2ba5347483b0cea4a7322d773a575ad93745e6813cbeb23c0
MD5 8fea4329092147be7487acad1f2ab03d
SHA1 59fa469ac930c9616b3175aa2f8a831d857f5d90
SHA512 37bde0272ca410b7ede8c078efee8b45a3522f8eb41699c969321c7d7430a6ee20998797f115ed5d23a71e6bb9e2d32f56a1a1fdf09e88e239e815edac735846
SSDEEP 384:dFIGx9efCtgmkFfk6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV6W9G+RhhromLb:dmGx9sWgmMfk68F1+UoAYDCx9Tuqh0VQ
TLSH
T16DB2DA3B640CCB7E9FC00A9DAD19AFD76D9802C79A588D4047FA994C03C77EB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7113d1817b73bef_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\b7113d1817b73bef_0
Size 63KB
SHA256 4594c5e2f39cdbe0385e865009b69b0a28f015cdf5a7c0a76fe794bcd16cd702
MD5 994a10a961a788abe13355aa1c63071c
SHA1 c34fb93361bc33c337c2ea5d01b8f7a54bef6daf
SHA512 b8456d7732206c861edd1a7445a742f8af86ea63bd341028ceb66edfeef9259fde049e846a809e4ecdff3768a833729fc8af611aad152987cd75f49bc7cd8a76
SSDEEP 1536:pziF3WOjiLu5XhviJCtdyOxcSrwM5Ec9z3ie3V0LY:9iF3PiC5hVdBPrjo
TLSH
T100535B997321B4B7837B71F1505F120B713AE5A7F004C4E4A198ECE15E54AAA02BBFBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 cd1f03b2c0ca5b05636ce3e7b9645e5d9e88a57ce3a83040322fec85e5385b59
MD5 20bbbdc09591d31353e3bc1e14985cd0
SHA1 96ae90f589917a5bb68a529e7ee74fdda3a62466
SHA512 d09c34fd7585378f731be207b5f8652b79cf73cb3b53b15182e3cec6d49b8ab382133759ce1f2e5bfcfea04af4d725aa598daea388d26bc5484842b1ee951c4e
TLSH
T14DA0026153508045F16882B0569103493B24C8D4020A5783C4E21088DC55595DB41081
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3b308b109632580555c3e74deb0281855c95476183d390ff54cdb319d8ee3425
MD5 7ded271de0f480fd4c41d37d6c06d2ee
SHA1 6979e29d1a213027e432b5f5637f10252a1d0832
SHA512 97d0c0b0e76d9b3a5c0a58ae5c63c8985bc01253f7b01dadfe70f7fb4890cc09ef80c0843cad1bbbaadc9851764f86bd10d4f636a6089666ae4ce46b0678a3f8
SSDEEP 48:KssIDKRakJRIFKSYY3ycUHA0yK62MKN9Ib02KCT6e2ucmd1OXH0bHpRhmfxi:KssAKRa4R2KSY62d6KWY3H0bHpRhmfxi
TLSH
T17191C16372371201387E791CD4E4A79A434732A33025E62B7BE940A58AE7E095DFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

39c04ed6-1b8b-4c0e-9e7a-cc93be8e53ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\39c04ed6-1b8b-4c0e-9e7a-cc93be8e53ad.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 b27bad5691e70c0afbfd7e894f308e6c49a62020f3e248e9ea7c88e66089c78e
MD5 125ece0b0ee9cfd255e24afa0e8ecdb4
SHA1 d3a075965862c40ecf38b036546d2e4e4351b510
SHA512 952e3cfe597063266b77b1481cb1a46d209dfae3a3f6e2d63bb0cb3512be9d33a340a43a62e6577ce3749851f170bca42fb16e2688e4d4099329b0423e7b511c
SSDEEP 768:O/UxvxjgC+U309KnJ0afxDc9bsMSJz/Fn/aSHXPyFQ:DZj3+U33WqVQbs7JT8SEQ
TLSH
T1CD03C03AAC505867CDE76780398ABA57FFF44953C9C529A855EDAF0C07CB3AC1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 fd965daccd25d8a4d6d489a75a27231fe1a4ba0199cb93d72c419ec50524a3aa
MD5 1f4ac608b9679b434b3b62cc0070313b
SHA1 2938ff6932180c355fdf29d2921c7e36a7216f3b
SHA512 6f26cdfd3c64622d6f8ab13ddec24ac778d64847d3a1cc321a0470fc895ccea24fc48c9de893a0166e819b70f5f653e3945b6a382f27eecfbe6ca229ad94d40a
SSDEEP 768:lFQ83OwgG9KnJ0aRxDc9bsMSJz/Fn/aMgIZu:E83OWqVQbs7JT8MgIZu
TLSH
T17503AF739C8089BBDDA69BC0BA8A7613AFF44593C9C96584E6DDAE0D01D72EC1307C25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 977f8ab7b78f460cffbf143f6e7485e7737b19edcd2df4d20807b8001edc6836
MD5 0315da4f095530623708c5e8586ec81a
SHA1 1350dc1c57464537c031a586bdf4f05ece59218f
SHA512 d11f1c3af41ea4114f25c6be8254a6e70ed2af5ba3b69b2391496e0e970d1f3cced4c11681cb868d9cbb6ac2a6328d0a6539e83020ff06f4257130df93be873a
SSDEEP 768:z/UxvxjgC+U3W9KnJ1xDc9bsMSJz/FnnXSHXPyK/:GZj3+U31DVQbs7JTNSb/
TLSH
T12003C03AEC505867CDE7A7803A8AF657BFF44953C9C529A84ADD6E0D07CB3AC1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 0f14a86fd6c6e56193e3c885d0ac308cdd96a0ed0b130cbbbe8562fb93900a71
MD5 311f9a87704f64c1bdda5fa0c8b009ab
SHA1 385db664730cf3a4d58c0fa9c79bdc97c4995bc3
SHA512 bf7a5a6fed26176d29726723a4e01fa240827ade5a7e1f61027494ac820f5bf29d8033ca7e99427f034fe4addd3c45d78d38bc3c4641ef6d61602e050220a347
SSDEEP 384:YZcIx38NbNITx5o+NFB199fw7DJkta3zdvLcN9YkWwJJhoMSboCzfnFLj/ala+V/:mx3T9KnJ0a3xDc9bsMSJz/Fn/aMgIZu
TLSH
T186F2CFB2AC9049A7DDD797C07987BA137FF48583C6CC298895DDAF0D06D72AD130782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ab71a433-b124-4b00-a063-c83670b0cc3c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ab71a433-b124-4b00-a063-c83670b0cc3c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download