hxxp://testyourcomputer[.]pl/

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
25/09/2026, 14:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://testyourcomputer.pl/
Sample260925-rlw2vsef47

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2184	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134348194613835599"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1494457106-2582563566-1599095290-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1494457106-2582563566-1599095290-1000\{6F5793DC-F1AA-4365-B9FD-30DCFC0066C4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
7216	msedge.exe
7216	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1632 wrote to memory of 860	1632	msedge.exe	81
PID 1632 wrote to memory of 2184	1632	msedge.exe	83
PID 1632 wrote to memory of 2128	1632	msedge.exe	84
PID 1632 wrote to memory of 2128	1632	msedge.exe	84
PID 1632 wrote to memory of 2128	1632	msedge.exe	84
PID 1632 wrote to memory of 5040	1632	msedge.exe	85
PID 1632 wrote to memory of 5040	1632	msedge.exe	85
PID 1632 wrote to memory of 656	1632	msedge.exe	87
PID 1632 wrote to memory of 656	1632	msedge.exe	87
PID 1632 wrote to memory of 656	1632	msedge.exe	87
PID 1632 wrote to memory of 2388	1632	msedge.exe	86
PID 1632 wrote to memory of 2388	1632	msedge.exe	86
PID 1632 wrote to memory of 2388	1632	msedge.exe	86
PID 1632 wrote to memory of 1720	1632	msedge.exe	88
PID 1632 wrote to memory of 1720	1632	msedge.exe	88
PID 1632 wrote to memory of 1720	1632	msedge.exe	88
PID 1632 wrote to memory of 4300	1632	msedge.exe	89
PID 1632 wrote to memory of 3424	1632	msedge.exe	90
PID 1632 wrote to memory of 4300	1632	msedge.exe	89
PID 1632 wrote to memory of 4300	1632	msedge.exe	89
PID 1632 wrote to memory of 1560	1632	msedge.exe	91
PID 1632 wrote to memory of 3424	1632	msedge.exe	90
PID 1632 wrote to memory of 3424	1632	msedge.exe	90
PID 1632 wrote to memory of 1560	1632	msedge.exe	91
PID 1632 wrote to memory of 1560	1632	msedge.exe	91
PID 1632 wrote to memory of 1428	1632	msedge.exe	93
PID 1632 wrote to memory of 1428	1632	msedge.exe	93
PID 1632 wrote to memory of 1428	1632	msedge.exe	93
PID 1632 wrote to memory of 4328	1632	msedge.exe	95
PID 1632 wrote to memory of 4328	1632	msedge.exe	95
PID 1632 wrote to memory of 4328	1632	msedge.exe	95
PID 1632 wrote to memory of 916	1632	msedge.exe	96
PID 1632 wrote to memory of 4164	1632	msedge.exe	97
PID 1632 wrote to memory of 916	1632	msedge.exe	96
PID 1632 wrote to memory of 4164	1632	msedge.exe	97
PID 1632 wrote to memory of 2364	1632	msedge.exe	98
PID 1632 wrote to memory of 2364	1632	msedge.exe	98
PID 1632 wrote to memory of 3136	1632	msedge.exe	99
PID 1632 wrote to memory of 4748	1632	msedge.exe	101
PID 3136 wrote to memory of 3528	3136	msedge.exe	102
PID 1632 wrote to memory of 4148	1632	msedge.exe	103
PID 1632 wrote to memory of 4148	1632	msedge.exe	103
PID 1632 wrote to memory of 4148	1632	msedge.exe	103
PID 1632 wrote to memory of 2368	1632	msedge.exe	104
PID 1632 wrote to memory of 2368	1632	msedge.exe	104
PID 1632 wrote to memory of 2368	1632	msedge.exe	104
PID 1632 wrote to memory of 4020	1632	msedge.exe	105
PID 1632 wrote to memory of 4020	1632	msedge.exe	105
PID 1632 wrote to memory of 4020	1632	msedge.exe	105
PID 1632 wrote to memory of 2568	1632	msedge.exe	106
PID 1632 wrote to memory of 2568	1632	msedge.exe	106
PID 1632 wrote to memory of 2568	1632	msedge.exe	106
PID 1632 wrote to memory of 5064	1632	msedge.exe	107
PID 1632 wrote to memory of 5064	1632	msedge.exe	107
PID 1632 wrote to memory of 5064	1632	msedge.exe	107
PID 1632 wrote to memory of 3640	1632	msedge.exe	108
PID 1632 wrote to memory of 3640	1632	msedge.exe	108
PID 1632 wrote to memory of 3640	1632	msedge.exe	108
PID 1632 wrote to memory of 1428	1632	msedge.exe	109
PID 1632 wrote to memory of 1428	1632	msedge.exe	109
PID 1632 wrote to memory of 1428	1632	msedge.exe	109
PID 1632 wrote to memory of 3716	1632	msedge.exe	110
PID 1632 wrote to memory of 3716	1632	msedge.exe	110
PID 1632 wrote to memory of 3716	1632	msedge.exe	110

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://testyourcomputer.pl/
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x280,0x7fff6044c188,0x7fff6044c194,0x7fff6044c1a0
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,14327405303737531646,16535019168583849338,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,11870268044330245459,10593924784317537017,262144 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:2
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,12582097653413841882,9360669480066844383,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:13
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,5663363181153766637,16582004391945063973,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,14645379259805266523,14602091880430883141,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,5391856176634817007,6448424909204479432,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,11883098825636489729,15128938173957498472,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:9
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4312,i,18315099823238069589,8071365415263546447,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4420,i,2962106920104743270,16070648457841696241,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:9
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4348,i,750173720211979679,16989820245879694586,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3548,i,6130654203551799362,11800199521327207024,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,3483184762763657364,8602024265281959525,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:14
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,12191061121987797223,14346967791320444734,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:14
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,8807154576039416742,15084050366174957487,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:14
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6664,i,5378263848368190709,5654567822948674985,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3136
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1104
    3⤵
    PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6744,i,182285246181675862,4631667541250001481,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:14
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6744,i,182285246181675862,4631667541250001481,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=6756 /prefetch:14
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6724,i,3930104929491904678,16939062750603626925,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6204,i,10865334137755877407,9702036161212536707,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6872,i,3289656507753722198,17132404478364659967,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6136,i,7629158225122358810,14155252837238380055,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=4536,i,14465190219492218662,6527396081754351599,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7016,i,16974815356238291628,6979703813969804634,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=4812,i,17173097223127771656,259896780644448322,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7188,i,15860538214842124764,8781139364759110452,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6300,i,8510799243569589107,6674353408937095192,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7464,i,5434616524211750632,11886892716613515564,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7460 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7448,i,6951503612178048837,8284336331873668710,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7468 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7348,i,12126130272880000709,15884486718252645618,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:1
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7424,i,13011510712304303152,10546046505061496765,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7724 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7572,i,3102993929423955058,6533844994783350453,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7944 /prefetch:1
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7688,i,14145478107811062544,16525168743176466862,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7948 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7704,i,10647007063963691006,2757438694981814349,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7960 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8548,i,7145814965053604157,13597528015759621689,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=8540 /prefetch:1
  2⤵
  PID:5184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8740,i,13846469412042749121,6125765595786832536,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=7844 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8920,i,4568197124134355347,12184694246463860206,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=8928 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=9060,i,13394941963049997423,14706134023398509937,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=9064 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8884,i,14184580398720657588,18248889136318400073,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=9008 /prefetch:1
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9344,i,11340453180833188319,17039663026875841425,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=8468 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9508,i,6664647657769521843,14693333538911624330,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=9488 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9668,i,5542197144323997133,4834337074577780357,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=9648 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8748,i,10107529923151997758,12572600470280758373,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=9892 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9876,i,4859432815476731046,9687816822151734633,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=9732 /prefetch:1
  2⤵
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=10112,i,14228035385555208615,10830454116738881968,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=10116 /prefetch:1
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=10260,i,6128342086378711156,2430536747116017170,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=10312 /prefetch:1
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10464,i,503650744649435503,11540735373096245449,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=10460 /prefetch:1
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=10600,i,13342444369288887662,5485725502432362041,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=10588 /prefetch:1
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=10744,i,12618341539623892788,5992478071561940129,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=10736 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=10884,i,17132978148904299519,10045034725712951657,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=10648 /prefetch:1
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=11060,i,7016101143476838034,17914635002232871028,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=11080 /prefetch:1
  2⤵
  PID:6352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=11140,i,13291329904196203665,9667595056667464455,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=11168 /prefetch:1
  2⤵
  PID:6364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=11308,i,6476550207844181525,17056078656073935276,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=11172 /prefetch:1
  2⤵
  PID:6372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=11184,i,8675972723700741859,12832442389579490352,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=11460 /prefetch:1
  2⤵
  PID:6428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=11572,i,10172087600477747373,30845282865809504,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=11592 /prefetch:1
  2⤵
  PID:6444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=11436,i,7278184545062762760,1676191135917867563,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=11720 /prefetch:1
  2⤵
  PID:6452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=11748,i,10933895481630728003,12737592638774767192,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=11752 /prefetch:1
  2⤵
  PID:6460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=11776,i,13826942906346462476,4333954847909519948,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=11800 /prefetch:1
  2⤵
  PID:6468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=12048,i,11651820771802136701,1584101092199210805,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12036 /prefetch:1
  2⤵
  PID:6476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=12300,i,12516583918767158536,12534832057849814843,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12312 /prefetch:1
  2⤵
  PID:6484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=12348,i,8065740437827528915,8665697102966054312,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12496 /prefetch:1
  2⤵
  PID:6496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=12364,i,3852217150136444934,15817631030049433598,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12608 /prefetch:1
  2⤵
  PID:6504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=12552,i,3766791218088171949,1440210210813605305,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12636 /prefetch:1
  2⤵
  PID:6512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=12464,i,11658941334152031995,2406299429923128888,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12612 /prefetch:1
  2⤵
  PID:6516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=12524,i,2467583241446314908,12748482785319726019,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12516 /prefetch:1
  2⤵
  PID:6536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=12500,i,7303532235862217479,16568304790215727334,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12624 /prefetch:1
  2⤵
  PID:6528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=12512,i,8971268589596807929,13002354523414246111,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12584 /prefetch:1
  2⤵
  PID:6544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=13108,i,14515454185624967668,2183572965162753656,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=13196 /prefetch:1
  2⤵
  PID:6552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=13244,i,14216378008529424237,10419123216389029107,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=13648 /prefetch:1
  2⤵
  PID:6564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=13268,i,7353924317244566418,16011327138554699429,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=13208 /prefetch:1
  2⤵
  PID:6572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=13548,i,12476618468436285348,14403592193985912144,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=13776 /prefetch:1
  2⤵
  PID:6584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=13240,i,9247566252556170966,13645778607579472198,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=13948 /prefetch:1
  2⤵
  PID:6592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=13884,i,8684463681280622819,5134684087589851128,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=13988 /prefetch:1
  2⤵
  PID:6600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=13672,i,13799828428506847839,12309022434461006977,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=13976 /prefetch:1
  2⤵
  PID:6608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=12300,i,15495975706773468136,4577787010066549707,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=11764 /prefetch:1
  2⤵
  PID:6892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=14500,i,15836783561097877528,13668229077605869124,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=14476 /prefetch:1
  2⤵
  PID:6992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=14704,i,2395997464774142329,10967259814918692688,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=14484 /prefetch:1
  2⤵
  PID:7064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=14708,i,3315998622210617578,17124110162950367657,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=14884 /prefetch:1
  2⤵
  PID:7136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=15040,i,13618124261578909798,13482761202249154349,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=14360 /prefetch:1
  2⤵
  PID:7144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=15036,i,1745560083351652028,14118006010042394398,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15172 /prefetch:1
  2⤵
  PID:7152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=14896,i,17787094262147487222,1806256660832973101,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15216 /prefetch:1
  2⤵
  PID:7160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=15420,i,16710703982047495881,16092320635855852826,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15428 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=15444,i,16334131315868031933,16615107711263217271,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15576 /prefetch:1
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=15708,i,14524810484955375378,12663573502413404282,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15720 /prefetch:1
  2⤵
  PID:6164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=15724,i,12227102334937542054,17668454472569729770,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15836 /prefetch:1
  2⤵
  PID:6204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=15972,i,10956103744558371980,2519910403159711670,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15984 /prefetch:1
  2⤵
  PID:6220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=16116,i,4501617843887541590,941419424632779761,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=16132 /prefetch:1
  2⤵
  PID:6240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=16268,i,15816053604616269201,6070796263462676678,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=16272 /prefetch:1
  2⤵
  PID:6248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=15452,i,13070534455764031084,18116638887039957744,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=16508 /prefetch:1
  2⤵
  PID:7392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=15300,i,917259522193350389,340769512783734422,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=16604 /prefetch:1
  2⤵
  PID:7404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=16712,i,7482062338143697302,10617407233214726971,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15456 /prefetch:1
  2⤵
  PID:7528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=16600,i,12259190409387792374,4416733857731086497,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=16864 /prefetch:1
  2⤵
  PID:7596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=16176,i,9833321374478096586,3057788949925334465,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=14896 /prefetch:1
  2⤵
  PID:7696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17128,i,4876734256747227758,17490880405717046651,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17144 /prefetch:14
  2⤵
  PID:7740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17132,i,5261939584889406499,3761237918450992460,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17172 /prefetch:14
  2⤵
  PID:7748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=17108,i,12947754709403610418,10559311451231909050,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17216 /prefetch:14
  2⤵
  PID:7756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=17292,i,11500132733814800122,6505003716272949867,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17312 /prefetch:1
  2⤵
  PID:7900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=16176,i,5138766836464078919,4091876166740057197,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17444 /prefetch:1
  2⤵
  PID:7976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=17100,i,8054834055754499072,5277030183736393249,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17604 /prefetch:1
  2⤵
  PID:7988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=17732,i,4313298406234160376,8032718788266240780,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17740 /prefetch:1
  2⤵
  PID:8004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=17880,i,16330526624442865099,9554301612460879798,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17904 /prefetch:1
  2⤵
  PID:8016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=17900,i,10064818926613303479,12142989490174321494,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17960 /prefetch:1
  2⤵
  PID:8024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=17916,i,12251461711409693053,8746190060019172195,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17912 /prefetch:1
  2⤵
  PID:8032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=17932,i,9541722786838647156,12235741988064778746,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=18036 /prefetch:1
  2⤵
  PID:8040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=18052,i,13976492005286715322,12418348974121155061,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=18240 /prefetch:1
  2⤵
  PID:8056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=18056,i,18000356136554474677,13378554703707262295,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=18336 /prefetch:1
  2⤵
  PID:8064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=18720,i,10800637147150301142,7347298183436684254,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=18752 /prefetch:1
  2⤵
  PID:8072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=18888,i,9462238693584997212,17893548476497844261,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=18896 /prefetch:1
  2⤵
  PID:8080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=19020,i,9811217301079836539,9211069169367429613,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=19024 /prefetch:1
  2⤵
  PID:8088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=18648,i,3305286101583777627,10551163720221685398,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=18324 /prefetch:1
  2⤵
  PID:8284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=8680,i,974444027361609477,8201075747830737566,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=8536 /prefetch:1
  2⤵
  PID:8364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=19048,i,5652120934515723135,15904499450571752997,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=19364 /prefetch:1
  2⤵
  PID:8412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=8636,i,15707970956205342905,17512387918152198146,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=18648 /prefetch:1
  2⤵
  PID:8440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=18632,i,16572870591478265021,8789650983464816091,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=4648 /prefetch:14
  2⤵
  PID:8872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=19256,i,576961063450868387,11377755018902297555,524288 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=16852 /prefetch:12
  2⤵
  PID:8272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=16548,i,1959456546958812017,17732828173369831562,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15416 /prefetch:1
  2⤵
  PID:8352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=8632,i,8013166273573595396,14828009294035189986,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=16528 /prefetch:1
  2⤵
  PID:8388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=10488,i,1024792918714125195,12336905171611789692,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=8684 /prefetch:1
  2⤵
  PID:8396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=17848,i,11889283002800294314,8900391055719743075,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=10056 /prefetch:1
  2⤵
  PID:6332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=6656,i,13380198723000306596,1370405296579369971,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=16548 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=17624,i,6133134117637108678,11440883920526493629,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17848 /prefetch:1
  2⤵
  PID:6620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=15440,i,12975593520691387240,17432913899521420188,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15544 /prefetch:1
  2⤵
  PID:6164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=15492,i,6585694615442161283,5839765316598195300,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17652 /prefetch:1
  2⤵
  PID:6516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=15516,i,18131386812690387487,12629185006410666359,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:6488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=14744,i,7591711711116238226,9340458786797145312,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12156 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=17136,i,17829883110701963941,5781104254422682045,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12116 /prefetch:1
  2⤵
  PID:7080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=12404,i,13704791198212572637,5447504864626636695,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12396 /prefetch:1
  2⤵
  PID:7864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=10380,i,5968608219580975276,17932012326542108933,262144 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=10368 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:7216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=16536,i,279960107040187788,4490720930307397535,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17820 /prefetch:1
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=13320,i,14386997001924767330,863666802915851893,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12392 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=3872,i,7957775157570858971,10282746307578468194,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=13204 /prefetch:1
  2⤵
  PID:6324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=13320,i,5256735591978008699,13113893938482475355,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17832 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=15488,i,11784711573843497036,13929378356763551559,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=11800 /prefetch:1
  2⤵
  PID:7572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=9608,i,18377424318592888524,6718745865491780584,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=9544 /prefetch:1
  2⤵
  PID:7508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=9592,i,12584794550498783486,16246268156461046853,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=10268 /prefetch:1
  2⤵
  PID:7392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=5836,i,10799999098253513382,18334617696324948120,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=15540 /prefetch:1
  2⤵
  PID:8232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=17212,i,13024153343047137530,4719057939959402793,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=3876 /prefetch:1
  2⤵
  PID:8704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=10528,i,5763141370430446631,12470585817876354298,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=12176 /prefetch:1
  2⤵
  PID:8712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=8636,i,8601768478200254020,250918076045672645,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=10424 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=12412,i,18392355642770215604,4793061659129859393,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=18492 /prefetch:1
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --always-read-main-dll --metrics-shmem-handle=17676,i,552532299598361930,10862840148001266664,2097152 --field-trial-handle=2556,i,13446979153034212851,8275516258065850053,262144 --variations-seed-version --mojo-platform-channel-handle=17628 /prefetch:1
  2⤵
  PID:3604

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 83a1e607d50fc1ea413ea3d46f361ac900a5f1b4d5dd4102b2959cbdb2c4cd70
MD5 d57c7e44d35c9cdb36ed14dfab0dfab0
SHA1 8b9d00e4fc1ace8371328737a28deb3bfb8ed61a
SHA512 00b1b35765c219cf319043400cea5573885f0ec520a41bbd3dbea4d771ffe15fb3bc1f53440e052b4e9c0fedc69b2f606d82e0faabbe997cf35324282c5dcc03
TLSH
T11ED02280FBA80230E0323833C3E2C323220AE0E000802EC808E382CE3F22208000FCEC
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000d3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
Size 16KB
SHA256 cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
MD5 9c6b5ce6b3452e98573e6409c34dd73c
SHA1 de607fadef62e36945a409a838eb8fc36d819b42
SHA512 4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7
SSDEEP 384:XQrDFyKFRXQQ5pGG913BahobGGOal+0HuXpAWBY:grxyUKQ53pdbGg47PY
TLSH
T11D72D0D62F2702F608F294202ECD392C679D7A25F77E6625F0659C860D58EB0D8F4F52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 4d03659187fde86c771637f6c4dfd3bdbe2d77bda06b8546899801f75c0ac65d
MD5 df76df14f05d0e9e105ab7e90740f10f
SHA1 ca2f164c5d3fa4ae20b33bfa592fba2eb4edb085
SHA512 349dbffa69f675dafeb0f7e6f3d72dd917fe63d5ad37b452e524bf7f83925dd3942620580afbe1e1fc566c95badd2f9456c5ab70cfb5ce9117c9e16e49d1303e
SSDEEP 96:MC+l6/oveYGX/zihgfbFyPRmW2iTxXh5Ut4dwo65YUEcEpXB77ydEW8KNam3ruzP:gl6/yHozxfkIUZ704Zpxvm34l0m/cMZ
TLSH
T1F9E1C950C98030D9EBB43D7C82DD5A09F93117AE3F034E8E2367E8B42B7BBCA51555A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 27f9fd65b39afe1939185a07d339c0460b9f1ced646dabf463a4220e37399da5
MD5 37ba4dd64e39e986a693eefcb0982799
SHA1 c0e300774200a79e30ae183679e0e646227accea
SHA512 f0f21f96f2423af032d64c2dc31e77bcbaa3669e6e3823d9c24ab83307845eabba9b7cd179de0180f67dda6f2bc89dae957e4575a0d09d93554bbbabd5626687
SSDEEP 96:5+P6/oveYGX/zihgf1FyPRmW2iTxXh5U/4dwo6sUE9EpXB77ykEW8KNambErMkpC:wP6/yHozxfuIUZ7a42pxSmQJl0m/cMM
TLSH
T1C0E1C750C98030D9EBB43D7C82ED1A09F9311BAE3F034E4E2367E8B42B7BBDA51555A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe591563.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe591563.TMP
Size 3KB
SHA256 17b58307af0559f6a6e209c1d1ee18ed4c92a756b71954db2efd10de9a8f17a0
MD5 421253e718b82a91e3f7ebd638e93351
SHA1 04b29d749e6b924b853394246bfb8aab2402ae6a
SHA512 72ed7d3e61de81dec0e5f11c7600b429e9cd91f04fd3a207d972e327c035399fc76b4b19d706483d83f5a5f6fb2f8e043f3ecc5f27e64b67698470918fffcfe7
TLSH
T1436172A4CB1100E5E7F411B1D3EC13833E3AAEB337839D61199BE5FA6D6A785A014290
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 28KB
SHA256 aab767f2d44f8bae46e60aafc7218add4d17012a9eb2188b8886cb1f131abcda
MD5 15359ee7e06365bee5d30fcda914b485
SHA1 2bb0811ba7a7a774c326f38c8014edb3005d9dd4
SHA512 1e42af3d2986915c258c6c9b7c06b0ad63be265ddda153cbd2070530bbe2aeee00380e109f352229f9e39bc2a59c9b810e9342bc9f6b2abbfdf20843d3525ff6
SSDEEP 384:D5GzkVUJvitkbpy1afOdjfBeWJ4+stkZcf1u1c57HJavGjfIiayHalrmRMptx6oP:B9RuNlgZ
TLSH
T1EFD29BF683BA4A7E8F1192F09A152D179F5D061703A83C9742E4AF468BB1D31E391E4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 7ca64354f4ab951a05e79b5bf553850460d38737dca36937c954c911c4de917c
MD5 907f20097c2226510a684599f9aea0ba
SHA1 63c59f1563bcd853990a2d2a101496a03918c221
SHA512 aaaadbe217460a755a162158cbda0bc9c9a731841c1a06a24164364320bea3e27e2db0c17cc71b2b6fe010ce0b3842de137acb0e970aefe12d44238fc96bd8b2
TLSH
T132D023236344B0B5559D9DC35455EC4FC36600540442EDD461D05CDC663545C4547140
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe58bf92.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58bf92.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 03d142e02a5a2b1153ae9592346942479d382cd2e0990e99d4613eef3f5b45f6
MD5 5e73b0c334b3fb2594f8ca839ff37ea9
SHA1 e4c5cdd06c9fc2e7b2b5df2168f61cda2c2d49a8
SHA512 c0599d2825f46971351068e7bc0086876dcbc153782b013ee20b754a8fee02b3599bece06014d1e8cc16fdb92d4ee962fb800bff1d0dd3d85d6f63f299c3d8a6
SSDEEP 192:sxZzRrbR/f2s7d1VhsbtAt6dpjqOJBrY/8O0ms6+WNBmt/Y0Y7AlIgrJ:sxZz9R/f2sJiAQhJhY/b0AW/579
TLSH
T10642E846BA24683B9CCBD259FA15BF53E6FC102695D40E48F6FDDA1C04E66CD221BC0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 0a6d8d212913e6921f0dfade4a98c1f6807211eaa6b6e1af32487b901d5dd5d4
MD5 e3c01694618258ea4e86f353c208c1eb
SHA1 2234dc7a22532410be78478fd875d5788f4f96c8
SHA512 fef960d924c01345be348f6dae0fe2fee393ce84b437e5761c3eda5ebe9c13f50dc04bd2509f962341fc1b21b56ae6ce2561f39c1ba8c79384b92f89d02a37bd
SSDEEP 384:sxZ7hmzR/f2snLEAc8nJhqQV/bAAmiJ/V/5eXaL/9o0U:sThmzR/f5LnRn2QV/b3miJR5eqLlop
TLSH
T16762E856B92098778CCBD519BE31BF52D6F810328D950E4CB6FCCA1C04EA6ED221BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 768771ec51e8047d2b31b8821076a03b12633a00d01e45ebb00fd42416f7a7c8
MD5 642ba80b51f30622d462213829eebfe2
SHA1 8389a9e82c7a3f532ecbc7223f280742f1060617
SHA512 f1a3321c4139233412a30a4a4b4db2e106489813f2e64b3a403391fd7343dd8cb5025eb621b64c19f8f997e5df6fd1dd0afce2814fd0d58ea7fcd7852ffca877
SSDEEP 384:sxZ7hmzR/f2sncEAc8nJhqQV/bAAmiJ/V/5eoaF/9o0U:sThmzR/f5cnRn2QV/b3miJR5eZFlop
TLSH
T10B62E856A92098778CCBD619BE35BF12D6F810229D950E4CB6FCC91C04EA2ED221BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 28KB
SHA256 0ecd26448723b148c1aaab2d52c9076e7f7dd2dfbcca070d5f40a60d4fd9deac
MD5 61e74cb736843bf1fb25031246dc2889
SHA1 206bf0ac3e0f4fd6e5868ada59c5103da9797fa6
SHA512 58b3c8a8aa655db8dede0417fce148a88ee5a6e08e32907321a8abdcf56a63dce6f41ae2b2b1fca74dfe775d3b3094292d17640f7cbcd07669bc5410e561985a
SSDEEP 768:UOnh588N24sWRmUUQ6I8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3CrLl/Ii09prroeG:UOnh588N24sWRmUUQ6Iu1jaKCrLpI79W
TLSH
T1D5D2FB3B244CCB7E4FC01E9DEC566F966EA802C796688D4047FA994C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\12985c3e-df34-4f3f-8ca9-a477663954dc\index-dir\the-real-index
Size 528B
SHA256 c231b35a1680354d39978de80f476f20e0e4010cc333a4ff5c83467eb83b6f95
MD5 5f73e049b8010aa8e4a95c1a3351f59c
SHA1 940516a007f141d8da3168425e68aa752977ec17
SHA512 7e28d95725df540f5d738ca10e59b2ad4a6ae538b348202e3e285ea0fd7baf1337b76d2b84d0c07abb875440bf1c89fafaf22a45fac0d077abc55278f701fa14
TLSH
T1DEF061DC4F530649FC244134207D759665B018EC53A06A1FB1FC802B8C4B784AE417A4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\12985c3e-df34-4f3f-8ca9-a477663954dc\index-dir\the-real-index
Size 3KB
SHA256 76041ab9af8a69fc6eaffc4308e1842e36a2bd265f118d2870b79f0fc95771cd
MD5 f01716cceae01cf823b5ce2f315ff173
SHA1 b92ca5a4cfc6cebbc223a1937c85fbdcf619aee4
SHA512 a654b9787e5d6fac7c1f0e885e47bf60780e9ecac88d8c9ac441f08793be48fe505d845bc3389d63aa5a63954fef9c3bf17f1f65f1a85374d3cd38847074c219
TLSH
T11851E90D4D472F5EECACA67104B20406377479EC23881A2754FE9539FCC7768595C66C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe584cb4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\12985c3e-df34-4f3f-8ca9-a477663954dc\index-dir\the-real-index~RFe584cb4.TMP
Size 528B
SHA256 c74d117448321aa5970a25fec08b06f5da7f9c6eac5276b41e910fae1201b413
MD5 90cead50263187d2ba6d8893058812b3
SHA1 6331a19498b839fd5032b28abbc89200b6c6cc03
SHA512 5233ef582f66f93a7c8cb7530adf9c912664f6523c54023f3618805ace1bbd5a336ed1d146abd6757322d1e0b6ac10b8e2af9aea43f885c8b2f2eea42490ffdc
TLSH
T16FF0C0D846138BD5FC040231B92D755A62E56408A3606E5FF5FA5456CC43BC05D82BB5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8fc1e8d3-7833-4bb1-8635-89096f3afffc\index-dir\the-real-index
Size 72B
SHA256 7407e85cef66ccc57a7546c3b7ba8fe7c366d9a1ac278dc0af7b198b5ed03123
MD5 b888af434fa6d65fdea61ee5f3567ffd
SHA1 a304df746b87b522fb43312b00e3462626c63293
SHA512 20c29875d62463b1c6a75e9de30087d21ba36a76d69351b06bc7ccc4ca73324a1856f9fadc7e2c0dbc5b82f4ddcc0460c450bcc63970cdc70bc09e7086cc498a
TLSH
T176A0022423801401C90636B865E6D1A96312CE180A4B270B65950448CE546C54D8941C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8fc1e8d3-7833-4bb1-8635-89096f3afffc\index-dir\the-real-index
Size 72B
SHA256 c1cd39896b8114d4a7efc00a3dfd708b2ce41acade2a9c25c761fc4575b17ec5
MD5 67ba9888cbf6760bbc88275bb64ce414
SHA1 9ae0094c713627008f143dc323227824cd65a43a
SHA512 a30d939a873f5f75cb2920f8723ccbad0d10af52aebdd82c489595dd6aadcbe43bae4699f3946a79439785415431c31dc3f72ffafcd8589b0d603d435b8123bd
TLSH
T11BA0022247C4000DD462A5B115624A613752FC13A500134B51914054CC50940CFA500C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 093f3835e944492eb5251458e205f7a4493f51b16a14e68f690aaa658ff275cf
MD5 f78915af66c2bc4b89cf26d4f881797a
SHA1 e6f38978f5c729ab3637934e32a5c3193d277b43
SHA512 e7e042bfc54047f5a75e3ee638e37d5344876d583d59822a7272b0845b290a11e6e56583657b3dc3fd03e897507277b5e5cfcbc973ee4a6e8beea181839fd011
TLSH
T103E0C0F73DE30810ECAFC3EB34714C540402B444D505ED4F661661D714B53136886C31
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 ebc9d2a0cbc026f9a9ea6d66c8cbcd3748034fb653aa61bf2fb5c4c3f5f4a391
MD5 b8ffcc92a8eeac493e73fd1358b0495e
SHA1 850af84c1c14e40c6881c8ea24a828e4095c839a
SHA512 ca4737eec0faac5a079eecd997bc8ad2fa7ed9bd69ce8147cb66027d5d200c900d6a944338212af8f9d89af972f8dbe750635b66b199e3a62059256bc80100ae
TLSH
T1D5A002969976D442C0000A78A16E0286A258CC9C0686721180FDDD548C7214B61A3014
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a42a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a42a.TMP
Size 48B
SHA256 5e24474f584789aa76ba661b321f931b7f15dd128c7097bace97572362289e39
MD5 332921773d8c6bda80ba7c303d268402
SHA1 d92010ee257761847bb53102b99a80f5ab71b990
SHA512 4bab6458bf1a1fcbc220ae86daacc6c0af819832792b0fd5c43e550a5bd11c14eb713daaa25a1ea540f09b1df765e935d5c8b8206558f23423b48d9cf18408ec
MD5 SHA1 SHA512

Submit Download

29a03dad-e88f-4218-98a9-344ee0f4ef51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\29a03dad-e88f-4218-98a9-344ee0f4ef51.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 da462c8068ace0bd800343f6e07dcfee46c54b7f6464d1dbe33e03fcfc128a92
MD5 81a8b5d13f83abf4e5d8418ada70028e
SHA1 edb8cdc7b2da394c05e2ef84d11ef1f45cab1bad
SHA512 1235c247082d1af759926dc6ee5dcf6d9c8cf736c8e42c3979e6410d9eaacde432225adb207e1650ab8d7afde99bbfb47857a494ce37a1a28babf027b3277300
SSDEEP 384:nZcIh8Nn4T3yx/EqeweD2GuEjXoQtgOIwZOyKhPHoH:PhByaq4DfFj4QXsjPHM
TLSH
T134827D769C789DB72DFBA441F5473A034EB8846BE6C5AB80A4DD6B1D00EE29C130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 06bdad0d3a3115d2e8fb29217a774a5d4ee85303aeb4ed08fc5c42364a91a88b
MD5 edf3c2a378edf883ca4171847900326c
SHA1 c466a35a9924b9db16bbe7a10abcf00ff3ec9fad
SHA512 9ad011383ef7bcf9c95f1f9ea03f890a4b7b5e2c7dfe399ea01972347699021aeb1a268e91b2f3c91875d66be0c049ce65ecb2ee298e00678f60ee24adb526dc
SSDEEP 384:aiFiZcIJ8N58TUNTUlIljT3yx/EqewhD2GuEjXEQtgOIwZOyKhPHoH:RFQJMwglyaqvDfFjUQXsjPHM
TLSH
T12DA27D778CA8C97B7DFB9A85F94636038EB44067D9C5FA90E2CD6A0D00EB19C130BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 58bb89fd3f8a42eb16b235b08830ebb6b8e5885aaa592d0265d7d981d19d2094
MD5 1843fdd98233ea25338b6dd9d2b8c89b
SHA1 341f45bb2dbe05b99399aee2d6d0c930c52b7dc9
SHA512 745659a13fc687bb8b824782e648cd7ac9bb2b35fa7c71ec20234a72a64bcb62e69374ab0d261797e6102489419c1702c5e65045d0b6250ebd2b7dd9c4ea37bd
SSDEEP 192:DGNE6KsE7uxQmiUy6UqgxuE+mXfu9rX1U6:DGNE6LEqPdRgxuEWb1U6
TLSH
T18902D739AC7C68BB9EF3AD45B4477A275F94112FE6842F84D6D81A1C00D724C1307926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 abb61ac9aef2f5ef02877b9e59f7e72d41a2bc812a3746fab985d9b24272bdb3
MD5 93d43cef6734c697500d4f135a80f01e
SHA1 b749bf0c3551ae44026e88f0ad1070de16448e03
SHA512 696e04a9d0a90a9b5e5f153ae4dfbe4830791b5f569cbd5ebecc78a938e5ddfb42a0c2c089b6a482d6d75a5519cebdf065b2ac0460ddebfd5daf9e8b3501ebef
SSDEEP 192:DGNa6KsE7ucQmiUymq+xuE+mXnXo628/tU6:DGNa6LEqsk+xuEjXEQU6
TLSH
T15C121C75AC78A86B5EE3A895F44739135EA4822BEBC47F80D5DC2A1C40EF25C134B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e880ab41a1d0a0270aa0c838be40d1617587e9185b5dd4286fdda7d9fb6e7264
MD5 9e59176c28850ebc1a50728fbc4df795
SHA1 87c9fb80d2c4292a87d361b46d429cff28f3be45
SHA512 fb6400d4e1b1bfd16ce98279ac4558b44fd71d27952d6d6700ea1bc175473bafc8ec7478b527945b7d984213802f4982aa475e6eb75aaab481cb78480d78e004
SSDEEP 384:FZcIh8NnjT3yx/EqewhD2GuEjXvQtgOIwZOyKhPHoH:9hIyaqvDfFj/QXsjPHM
TLSH
T13F827D769C789DB72DFBA441F5473A034FB8806BE6C5AB80A4DD6B0D00EE29C131BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download