Analysis
- user interaction
yes - max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
09/10/2026, 22:27
General
- Target ggs_worm_v2.exe
- Size 10.0MB
- Sample261009-2c8dmsft6s
- SHA256 1974671a06e8ca43cb54e88a83e9ab88c304b54e777989697e9d4299c8f57dd2
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 2 IoCs
- Loads dropped DLL 8 IoCs
- Detects Pyinstaller 1 IoCs
- Executes a command shell one-liner 1 TTPs 64 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
- Opens file in notepad (likely ransom note) 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ggs_worm_v2.exe"C:\Users\Admin\AppData\Local\Temp\ggs_worm_v2.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ggs_worm_v2.exe"C:\Users\Admin\AppData\Local\Temp\ggs_worm_v2.exe"2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\zbnvbpgg.exeC:\Users\Admin\AppData\Local\Temp\zbnvbpgg.exe3⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Local\Temp\zbnvbpgg.exeC:\Users\Admin\AppData\Local\Temp\zbnvbpgg.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\azoukulb.exeC:\Users\Admin\AppData\Local\Temp\azoukulb.exe3⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Local\Temp\azoukulb.exeC:\Users\Admin\AppData\Local\Temp\azoukulb.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\cxkaojnx.exeC:\Users\Admin\AppData\Local\Temp\cxkaojnx.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\cxkaojnx.exeC:\Users\Admin\AppData\Local\Temp\cxkaojnx.exe4⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\menqgpxm.exeC:\Users\Admin\AppData\Local\Temp\menqgpxm.exe3⤵
-
C:\Users\Admin\AppData\Local\Temp\menqgpxm.exeC:\Users\Admin\AppData\Local\Temp\menqgpxm.exe4⤵
-
C:\Users\Admin\AppData\Local\Temp\bnpslzcs.exeC:\Users\Admin\AppData\Local\Temp\bnpslzcs.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\bnpslzcs.exeC:\Users\Admin\AppData\Local\Temp\bnpslzcs.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\hdnpkmeg.exeC:\Users\Admin\AppData\Local\Temp\hdnpkmeg.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\hdnpkmeg.exeC:\Users\Admin\AppData\Local\Temp\hdnpkmeg.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\cxtntaxb.exeC:\Users\Admin\AppData\Local\Temp\cxtntaxb.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\cxtntaxb.exeC:\Users\Admin\AppData\Local\Temp\cxtntaxb.exe6⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\wtslsioe.exeC:\Users\Admin\AppData\Local\Temp\wtslsioe.exe5⤵
-
C:\Users\Admin\AppData\Local\Temp\wtslsioe.exeC:\Users\Admin\AppData\Local\Temp\wtslsioe.exe6⤵
-
C:\Users\Admin\AppData\Local\Temp\cwocntzb.exeC:\Users\Admin\AppData\Local\Temp\cwocntzb.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\cwocntzb.exeC:\Users\Admin\AppData\Local\Temp\cwocntzb.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\ddfzkrqv.exeC:\Users\Admin\AppData\Local\Temp\ddfzkrqv.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\ddfzkrqv.exeC:\Users\Admin\AppData\Local\Temp\ddfzkrqv.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\gwilwqqd.exeC:\Users\Admin\AppData\Local\Temp\gwilwqqd.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\gwilwqqd.exeC:\Users\Admin\AppData\Local\Temp\gwilwqqd.exe8⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\ewpyyeer.exeC:\Users\Admin\AppData\Local\Temp\ewpyyeer.exe7⤵
-
C:\Users\Admin\AppData\Local\Temp\ewpyyeer.exeC:\Users\Admin\AppData\Local\Temp\ewpyyeer.exe8⤵
-
C:\Users\Admin\AppData\Local\Temp\wdwmlfzc.exeC:\Users\Admin\AppData\Local\Temp\wdwmlfzc.exe9⤵
-
C:\Users\Admin\AppData\Local\Temp\wdwmlfzc.exeC:\Users\Admin\AppData\Local\Temp\wdwmlfzc.exe10⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\raqjbtnf.exeC:\Users\Admin\AppData\Local\Temp\raqjbtnf.exe9⤵
-
C:\Users\Admin\AppData\Local\Temp\raqjbtnf.exeC:\Users\Admin\AppData\Local\Temp\raqjbtnf.exe10⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\mvqivfqm.exeC:\Users\Admin\AppData\Local\Temp\mvqivfqm.exe9⤵
-
C:\Users\Admin\AppData\Local\Temp\mvqivfqm.exeC:\Users\Admin\AppData\Local\Temp\mvqivfqm.exe10⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\fqeajhai.exeC:\Users\Admin\AppData\Local\Temp\fqeajhai.exe9⤵
-
C:\Users\Admin\AppData\Local\Temp\fqeajhai.exeC:\Users\Admin\AppData\Local\Temp\fqeajhai.exe10⤵
-
C:\Users\Admin\AppData\Local\Temp\zdjjfdgn.exeC:\Users\Admin\AppData\Local\Temp\zdjjfdgn.exe11⤵
-
C:\Users\Admin\AppData\Local\Temp\zdjjfdgn.exeC:\Users\Admin\AppData\Local\Temp\zdjjfdgn.exe12⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\hosyggty.exeC:\Users\Admin\AppData\Local\Temp\hosyggty.exe11⤵
-
C:\Users\Admin\AppData\Local\Temp\hosyggty.exeC:\Users\Admin\AppData\Local\Temp\hosyggty.exe12⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\mwwrtrsx.exeC:\Users\Admin\AppData\Local\Temp\mwwrtrsx.exe11⤵
-
C:\Users\Admin\AppData\Local\Temp\mwwrtrsx.exeC:\Users\Admin\AppData\Local\Temp\mwwrtrsx.exe12⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\cqjpqugn.exeC:\Users\Admin\AppData\Local\Temp\cqjpqugn.exe11⤵
-
C:\Users\Admin\AppData\Local\Temp\cqjpqugn.exeC:\Users\Admin\AppData\Local\Temp\cqjpqugn.exe12⤵
-
C:\Users\Admin\AppData\Local\Temp\crvqquju.exeC:\Users\Admin\AppData\Local\Temp\crvqquju.exe13⤵
-
C:\Users\Admin\AppData\Local\Temp\crvqquju.exeC:\Users\Admin\AppData\Local\Temp\crvqquju.exe14⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\eaqmcgos.exeC:\Users\Admin\AppData\Local\Temp\eaqmcgos.exe13⤵
-
C:\Users\Admin\AppData\Local\Temp\eaqmcgos.exeC:\Users\Admin\AppData\Local\Temp\eaqmcgos.exe14⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\lpgvtshc.exeC:\Users\Admin\AppData\Local\Temp\lpgvtshc.exe13⤵
-
C:\Users\Admin\AppData\Local\Temp\lpgvtshc.exeC:\Users\Admin\AppData\Local\Temp\lpgvtshc.exe14⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\yprwunwp.exeC:\Users\Admin\AppData\Local\Temp\yprwunwp.exe13⤵
-
C:\Users\Admin\AppData\Local\Temp\yprwunwp.exeC:\Users\Admin\AppData\Local\Temp\yprwunwp.exe14⤵
-
C:\Users\Admin\AppData\Local\Temp\uzkjwira.exeC:\Users\Admin\AppData\Local\Temp\uzkjwira.exe15⤵
-
C:\Users\Admin\AppData\Local\Temp\uzkjwira.exeC:\Users\Admin\AppData\Local\Temp\uzkjwira.exe16⤵
-
C:\Users\Admin\AppData\Local\Temp\bfyhteyf.exeC:\Users\Admin\AppData\Local\Temp\bfyhteyf.exe17⤵
-
C:\Users\Admin\AppData\Local\Temp\bfyhteyf.exeC:\Users\Admin\AppData\Local\Temp\bfyhteyf.exe18⤵
-
C:\Users\Admin\AppData\Local\Temp\wxrwabtq.exeC:\Users\Admin\AppData\Local\Temp\wxrwabtq.exe19⤵
-
C:\Users\Admin\AppData\Local\Temp\wxrwabtq.exeC:\Users\Admin\AppData\Local\Temp\wxrwabtq.exe20⤵
-
C:\Users\Admin\AppData\Local\Temp\cvdahkef.exeC:\Users\Admin\AppData\Local\Temp\cvdahkef.exe21⤵
-
C:\Users\Admin\AppData\Local\Temp\cvdahkef.exeC:\Users\Admin\AppData\Local\Temp\cvdahkef.exe22⤵
-
C:\Users\Admin\AppData\Local\Temp\ultxwmdy.exeC:\Users\Admin\AppData\Local\Temp\ultxwmdy.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\ultxwmdy.exeC:\Users\Admin\AppData\Local\Temp\ultxwmdy.exe24⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\tigevmly.exeC:\Users\Admin\AppData\Local\Temp\tigevmly.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\tigevmly.exeC:\Users\Admin\AppData\Local\Temp\tigevmly.exe24⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\avllzjqj.exeC:\Users\Admin\AppData\Local\Temp\avllzjqj.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\avllzjqj.exeC:\Users\Admin\AppData\Local\Temp\avllzjqj.exe24⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\ibajnwhy.exeC:\Users\Admin\AppData\Local\Temp\ibajnwhy.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\ibajnwhy.exeC:\Users\Admin\AppData\Local\Temp\ibajnwhy.exe24⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 223⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 123⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 623⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 023⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 423⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 223⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 123⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 623⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 023⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 423⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 223⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 123⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 623⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 023⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 423⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 223⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 123⤵
- Executes a command shell one-liner
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\cnzroybw.exeC:\Users\Admin\AppData\Local\Temp\cnzroybw.exe21⤵
-
C:\Users\Admin\AppData\Local\Temp\cnzroybw.exeC:\Users\Admin\AppData\Local\Temp\cnzroybw.exe22⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\jotjojjv.exeC:\Users\Admin\AppData\Local\Temp\jotjojjv.exe21⤵
-
C:\Users\Admin\AppData\Local\Temp\jotjojjv.exeC:\Users\Admin\AppData\Local\Temp\jotjojjv.exe22⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\gyvcsmzd.exeC:\Users\Admin\AppData\Local\Temp\gyvcsmzd.exe21⤵
-
C:\Users\Admin\AppData\Local\Temp\gyvcsmzd.exeC:\Users\Admin\AppData\Local\Temp\gyvcsmzd.exe22⤵
-
C:\Users\Admin\AppData\Local\Temp\hcipcuso.exeC:\Users\Admin\AppData\Local\Temp\hcipcuso.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\hcipcuso.exeC:\Users\Admin\AppData\Local\Temp\hcipcuso.exe24⤵
-
C:\Users\Admin\AppData\Local\Temp\xykljvuv.exeC:\Users\Admin\AppData\Local\Temp\xykljvuv.exe25⤵
-
C:\Users\Admin\AppData\Local\Temp\xykljvuv.exeC:\Users\Admin\AppData\Local\Temp\xykljvuv.exe26⤵
-
C:\Users\Admin\AppData\Local\Temp\zmmgprkt.exeC:\Users\Admin\AppData\Local\Temp\zmmgprkt.exe27⤵
-
C:\Users\Admin\AppData\Local\Temp\zmmgprkt.exeC:\Users\Admin\AppData\Local\Temp\zmmgprkt.exe28⤵
-
C:\Users\Admin\AppData\Local\Temp\ktaduifz.exeC:\Users\Admin\AppData\Local\Temp\ktaduifz.exe29⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\ytcrokgk.exeC:\Users\Admin\AppData\Local\Temp\ytcrokgk.exe27⤵
-
C:\Users\Admin\AppData\Local\Temp\ytcrokgk.exeC:\Users\Admin\AppData\Local\Temp\ytcrokgk.exe28⤵
-
C:\Users\Admin\AppData\Local\Temp\kkrehgqx.exeC:\Users\Admin\AppData\Local\Temp\kkrehgqx.exe29⤵
-
-
C:\Users\Admin\AppData\Local\Temp\hprkgjxa.exeC:\Users\Admin\AppData\Local\Temp\hprkgjxa.exe29⤵
-
-
C:\Users\Admin\AppData\Local\Temp\reuhpjsd.exeC:\Users\Admin\AppData\Local\Temp\reuhpjsd.exe29⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\ycazyfoq.exeC:\Users\Admin\AppData\Local\Temp\ycazyfoq.exe27⤵
-
C:\Users\Admin\AppData\Local\Temp\ycazyfoq.exeC:\Users\Admin\AppData\Local\Temp\ycazyfoq.exe28⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\alstksqw.exeC:\Users\Admin\AppData\Local\Temp\alstksqw.exe27⤵
-
C:\Users\Admin\AppData\Local\Temp\alstksqw.exeC:\Users\Admin\AppData\Local\Temp\alstksqw.exe28⤵
-
C:\Users\Admin\AppData\Local\Temp\kitvprgc.exeC:\Users\Admin\AppData\Local\Temp\kitvprgc.exe29⤵
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 227⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 127⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\tqkcyoxf.exeC:\Users\Admin\AppData\Local\Temp\tqkcyoxf.exe25⤵
-
C:\Users\Admin\AppData\Local\Temp\tqkcyoxf.exeC:\Users\Admin\AppData\Local\Temp\tqkcyoxf.exe26⤵
-
C:\Users\Admin\AppData\Local\Temp\onatlkgz.exeC:\Users\Admin\AppData\Local\Temp\onatlkgz.exe27⤵
-
C:\Users\Admin\AppData\Local\Temp\onatlkgz.exeC:\Users\Admin\AppData\Local\Temp\onatlkgz.exe28⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\ezpanycs.exeC:\Users\Admin\AppData\Local\Temp\ezpanycs.exe27⤵
-
C:\Users\Admin\AppData\Local\Temp\ezpanycs.exeC:\Users\Admin\AppData\Local\Temp\ezpanycs.exe28⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\hciinpbp.exeC:\Users\Admin\AppData\Local\Temp\hciinpbp.exe27⤵
-
C:\Users\Admin\AppData\Local\Temp\hciinpbp.exeC:\Users\Admin\AppData\Local\Temp\hciinpbp.exe28⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\retngtlm.exeC:\Users\Admin\AppData\Local\Temp\retngtlm.exe27⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\bvwuupdi.exeC:\Users\Admin\AppData\Local\Temp\bvwuupdi.exe25⤵
-
C:\Users\Admin\AppData\Local\Temp\bvwuupdi.exeC:\Users\Admin\AppData\Local\Temp\bvwuupdi.exe26⤵
-
C:\Users\Admin\AppData\Local\Temp\pjidpdbr.exeC:\Users\Admin\AppData\Local\Temp\pjidpdbr.exe27⤵
-
C:\Users\Admin\AppData\Local\Temp\pjidpdbr.exeC:\Users\Admin\AppData\Local\Temp\pjidpdbr.exe28⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\xkaqgjrb.exeC:\Users\Admin\AppData\Local\Temp\xkaqgjrb.exe27⤵
-
C:\Users\Admin\AppData\Local\Temp\xkaqgjrb.exeC:\Users\Admin\AppData\Local\Temp\xkaqgjrb.exe28⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\ugqyzfav.exeC:\Users\Admin\AppData\Local\Temp\ugqyzfav.exe27⤵
-
C:\Users\Admin\AppData\Local\Temp\ugqyzfav.exeC:\Users\Admin\AppData\Local\Temp\ugqyzfav.exe28⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\xgxapizz.exeC:\Users\Admin\AppData\Local\Temp\xgxapizz.exe27⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\mlklqtrr.exeC:\Users\Admin\AppData\Local\Temp\mlklqtrr.exe25⤵
-
C:\Users\Admin\AppData\Local\Temp\mlklqtrr.exeC:\Users\Admin\AppData\Local\Temp\mlklqtrr.exe26⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 225⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 125⤵
- Executes a command shell one-liner
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html25⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 625⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html25⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html25⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 025⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html25⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\kbihkgex.exeC:\Users\Admin\AppData\Local\Temp\kbihkgex.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\kbihkgex.exeC:\Users\Admin\AppData\Local\Temp\kbihkgex.exe24⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\vuxuqchj.exeC:\Users\Admin\AppData\Local\Temp\vuxuqchj.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\vuxuqchj.exeC:\Users\Admin\AppData\Local\Temp\vuxuqchj.exe24⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\igfxdvtp.exeC:\Users\Admin\AppData\Local\Temp\igfxdvtp.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\igfxdvtp.exeC:\Users\Admin\AppData\Local\Temp\igfxdvtp.exe24⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 223⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 123⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 623⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 023⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 423⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 223⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 123⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 623⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 023⤵
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 221⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 121⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html21⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 621⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 021⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 421⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 221⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 121⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 621⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 021⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 421⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 221⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 121⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 621⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 021⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 421⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 221⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 121⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 621⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 021⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 421⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 221⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 121⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 621⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 021⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 421⤵
- Executes a command shell one-liner
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\ibzllcfr.exeC:\Users\Admin\AppData\Local\Temp\ibzllcfr.exe19⤵
-
C:\Users\Admin\AppData\Local\Temp\ibzllcfr.exeC:\Users\Admin\AppData\Local\Temp\ibzllcfr.exe20⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\lcqsgbwg.exeC:\Users\Admin\AppData\Local\Temp\lcqsgbwg.exe19⤵
-
C:\Users\Admin\AppData\Local\Temp\lcqsgbwg.exeC:\Users\Admin\AppData\Local\Temp\lcqsgbwg.exe20⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\atrvrmxn.exeC:\Users\Admin\AppData\Local\Temp\atrvrmxn.exe19⤵
-
C:\Users\Admin\AppData\Local\Temp\atrvrmxn.exeC:\Users\Admin\AppData\Local\Temp\atrvrmxn.exe20⤵
-
C:\Users\Admin\AppData\Local\Temp\mxuubkgo.exeC:\Users\Admin\AppData\Local\Temp\mxuubkgo.exe21⤵
-
C:\Users\Admin\AppData\Local\Temp\mxuubkgo.exeC:\Users\Admin\AppData\Local\Temp\mxuubkgo.exe22⤵
-
C:\Users\Admin\AppData\Local\Temp\cxpgkxff.exeC:\Users\Admin\AppData\Local\Temp\cxpgkxff.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\cxpgkxff.exeC:\Users\Admin\AppData\Local\Temp\cxpgkxff.exe24⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\gneypuof.exeC:\Users\Admin\AppData\Local\Temp\gneypuof.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\gneypuof.exeC:\Users\Admin\AppData\Local\Temp\gneypuof.exe24⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\vhlvnyiv.exeC:\Users\Admin\AppData\Local\Temp\vhlvnyiv.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\vhlvnyiv.exeC:\Users\Admin\AppData\Local\Temp\vhlvnyiv.exe24⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\wyczvwhh.exeC:\Users\Admin\AppData\Local\Temp\wyczvwhh.exe23⤵
-
C:\Users\Admin\AppData\Local\Temp\wyczvwhh.exeC:\Users\Admin\AppData\Local\Temp\wyczvwhh.exe24⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 223⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 123⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 623⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 023⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 423⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 223⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 123⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 623⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\mppadtep.exeC:\Users\Admin\AppData\Local\Temp\mppadtep.exe21⤵
-
C:\Users\Admin\AppData\Local\Temp\mppadtep.exeC:\Users\Admin\AppData\Local\Temp\mppadtep.exe22⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\eqaepcec.exeC:\Users\Admin\AppData\Local\Temp\eqaepcec.exe21⤵
-
C:\Users\Admin\AppData\Local\Temp\eqaepcec.exeC:\Users\Admin\AppData\Local\Temp\eqaepcec.exe22⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\nbjdypjh.exeC:\Users\Admin\AppData\Local\Temp\nbjdypjh.exe21⤵
-
C:\Users\Admin\AppData\Local\Temp\nbjdypjh.exeC:\Users\Admin\AppData\Local\Temp\nbjdypjh.exe22⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 221⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 121⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html21⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html21⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 621⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html21⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html21⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html21⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 021⤵
- Executes a command shell one-liner
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html21⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 421⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html21⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 221⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 121⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 621⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 021⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 421⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 221⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 121⤵
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 219⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 119⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html19⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html19⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html19⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 619⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html19⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html19⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html19⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html19⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html19⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 019⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html19⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html19⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 419⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 219⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 119⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 619⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 019⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 419⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 219⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 119⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 619⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 019⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 419⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 219⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 119⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 619⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 019⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 419⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 219⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 119⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 619⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 019⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 419⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 219⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 119⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\odhlbqtl.exeC:\Users\Admin\AppData\Local\Temp\odhlbqtl.exe17⤵
-
C:\Users\Admin\AppData\Local\Temp\odhlbqtl.exeC:\Users\Admin\AppData\Local\Temp\odhlbqtl.exe18⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\tzlqmspv.exeC:\Users\Admin\AppData\Local\Temp\tzlqmspv.exe17⤵
-
C:\Users\Admin\AppData\Local\Temp\tzlqmspv.exeC:\Users\Admin\AppData\Local\Temp\tzlqmspv.exe18⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\ztbnxmmz.exeC:\Users\Admin\AppData\Local\Temp\ztbnxmmz.exe17⤵
-
C:\Users\Admin\AppData\Local\Temp\ztbnxmmz.exeC:\Users\Admin\AppData\Local\Temp\ztbnxmmz.exe18⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 217⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 117⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html17⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html17⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 617⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html17⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html17⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 017⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html17⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html17⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 417⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 217⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 117⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 617⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 017⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 417⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 217⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 117⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 617⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 017⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 417⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 217⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 117⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 617⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 017⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 417⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 217⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 117⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 617⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 017⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 417⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 217⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 117⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 617⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 017⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\piaxtjvu.exeC:\Users\Admin\AppData\Local\Temp\piaxtjvu.exe15⤵
-
C:\Users\Admin\AppData\Local\Temp\piaxtjvu.exeC:\Users\Admin\AppData\Local\Temp\piaxtjvu.exe16⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\btnlpbnq.exeC:\Users\Admin\AppData\Local\Temp\btnlpbnq.exe15⤵
-
C:\Users\Admin\AppData\Local\Temp\btnlpbnq.exeC:\Users\Admin\AppData\Local\Temp\btnlpbnq.exe16⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\rqlfoxgl.exeC:\Users\Admin\AppData\Local\Temp\rqlfoxgl.exe15⤵
-
C:\Users\Admin\AppData\Local\Temp\rqlfoxgl.exeC:\Users\Admin\AppData\Local\Temp\rqlfoxgl.exe16⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 215⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 115⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 615⤵
- Executes a command shell one-liner
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 015⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html15⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 415⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 215⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 115⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 615⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 015⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 415⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 215⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 115⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 615⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 015⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 415⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 215⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 115⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 615⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 015⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 415⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 215⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 115⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 615⤵
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 213⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 113⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html13⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 613⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html13⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 013⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html13⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html13⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 413⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 213⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 113⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 613⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 013⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 413⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 213⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 113⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 613⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 013⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 413⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 213⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 113⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 613⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 013⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 413⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 213⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 113⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 613⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 013⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 413⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 213⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 113⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 613⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 013⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 413⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 213⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 113⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 613⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 013⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 413⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 213⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 113⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 613⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 013⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 413⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 213⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 113⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 613⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 013⤵
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 211⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 111⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 611⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 011⤵
- Executes a command shell one-liner
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html11⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html11⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 411⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html11⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html11⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html11⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html11⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 211⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html11⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html11⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 111⤵
- Executes a command shell one-liner
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html11⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html11⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 611⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 011⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 411⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 211⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 111⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 611⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 011⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 411⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 211⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 111⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 611⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 011⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 411⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 211⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 111⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 611⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 011⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 411⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 211⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 111⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 611⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 011⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 411⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 211⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 111⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 611⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 011⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 411⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 211⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 111⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 611⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 011⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 411⤵
- Executes a command shell one-liner
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 29⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 19⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 69⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 09⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 49⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 29⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 19⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 69⤵
- Executes a command shell one-liner
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html9⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 09⤵
- Executes a command shell one-liner
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html9⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html9⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html9⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html9⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 49⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html9⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html9⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html9⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 29⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html9⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html9⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 19⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 69⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 09⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 49⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 29⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 19⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 69⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 09⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 49⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 29⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 19⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 69⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 09⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 49⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 29⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 19⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 69⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 09⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 49⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 29⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 19⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 69⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 09⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 49⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 29⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 19⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 69⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 09⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 49⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 29⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 19⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 69⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 09⤵
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
- Executes a command shell one-liner
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html7⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html7⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html7⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html7⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html7⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html7⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html7⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html7⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 17⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 67⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 07⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 47⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 27⤵
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html5⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html5⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html5⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html5⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html5⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html5⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html5⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html5⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html5⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html5⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 25⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 15⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 65⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 05⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 45⤵
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 23⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_0.html3⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2ec,0x2f0,0x2f4,0x2e8,0x314,0x7ffb457cc188,0x7ffb457cc194,0x7ffb457cc1a04⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1520,i,10772416726732593267,13703360464850497083,262144 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:24⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1652,i,5090611897545529979,12470648131632240887,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:114⤵
- System Time Discovery
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2228,i,15868610165665711452,15639077221942507052,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:134⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,15227684949180326253,11798906855243832782,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,14470011615946798700,16240626439687639941,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,16017115195203151736,8995764514430285518,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4440,i,5696891387504466300,6512550696649657044,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,9687662774166828901,9327022917765950287,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:94⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5488,i,4235584544453251916,7147343775938152261,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4052,i,16734943996131020729,4793603800569651179,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5740,i,12119417995482538018,12460999102030128724,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5920,i,6915670574271628263,16918967497350646310,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6032,i,15512793606726726987,5789260107858108116,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6292,i,944336324031187036,16848349932260187835,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6424,i,7105447217527298172,14231284139069465453,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6188,i,9169947126703900915,5278533653227895916,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6716,i,6056075679082298899,5327160265985177838,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6864,i,541632534447048873,9175141983929564121,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6780,i,2348767479103975774,7141366767798534264,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=7004 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7112,i,15934254835135877293,17396664938799974844,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=7140 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7268,i,4870885791596730057,1342791413199041480,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=7292 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7432,i,13713410899250083510,18141785054881206188,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=7300 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7552,i,9488215639619162810,3696558413675356557,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=7544 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7700,i,12392385218021121695,9784111770603475641,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=7716 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=7584,i,13736920346139182038,14635743164488927583,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=7856 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7964,i,17463467879219497614,17881913934017428698,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=7976 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8512,i,14695215270151534391,1479091755722353249,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=8504 /prefetch:144⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8752,i,6481199001453199065,5822196392981390443,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=8836 /prefetch:144⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8760,i,12666058258105543602,6454155227663346758,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=8856 /prefetch:144⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=9496,i,7651730850603558115,9160264499292787271,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=9680,i,11037288603168334302,17212632746226337018,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=9644,i,8523042579395417364,15518267961734581996,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=9860 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=9736,i,17205072193886526389,933791019175724571,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=10032 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=10124,i,15702300248839325508,4019530388224475200,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=10164 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=10352,i,1905772619168760736,15175615843445993103,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=10340 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=10504,i,4310070194250618260,6609832646714254719,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=10492 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=10692,i,9783517856215455,2829011431855445246,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=10460 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=10812,i,201297529702897048,1238421033154712534,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=10848 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=10796,i,6561988332504879537,13224004990729145556,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=10840 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8376,i,17373429618690791802,13059703825246278691,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=8604 /prefetch:144⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8552,i,2533515045493293911,7769708931167011273,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=11896 /prefetch:144⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8400,i,16449785029233703360,15692056694437240273,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=11940 /prefetch:144⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=11992,i,12531324628672186692,14706309514933402783,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=12016 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=12156,i,5208836982230269589,289864600933544411,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=12172 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=12352,i,359026011159295633,4301066740271938947,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=12376 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12512,i,6590640373996424380,8245166801210772222,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=12304 /prefetch:144⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=12920,i,1862035418550944126,15968941772879632356,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=12944 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12512,i,6590640373996424380,8245166801210772222,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=12304 /prefetch:144⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=13128,i,2215144977950021012,8056581045175828961,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=13136 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=13152,i,17827259368571202492,17577209150491292070,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=12948 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=13116,i,14110457218598398491,4033320999932397745,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=13492 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=13528,i,11384079293956181838,4175954259126002622,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=13636 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=2140,i,18271457733971079945,9388495126416558664,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=13828 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=5476,i,1615720394733125790,3531117251013049964,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=13988,i,2637874133774498384,3641309476815723460,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=13996 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=13940,i,6554964558521510665,7329661511131596062,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=14120 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=14140,i,15312066981150692534,13469618157941988455,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=14300 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=14488,i,6146753007197662670,1723104334933452336,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=14492 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=14656,i,10542920580984210561,10720857939025699701,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=14684 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=14820,i,8156151510160304857,15565499562882179160,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=14808 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=14816,i,1353741399156941999,3611015229245187663,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=14852 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=14892,i,5628140762113234634,10201990067853236025,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=15168 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=15008,i,12346704119083328328,1706243367933785984,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=15400 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=15548,i,16331547431068130695,3253795697896054239,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=15544 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=15612,i,1526816132801256012,16418234840363895824,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=15752 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=15632,i,4457065002037269265,14612575848914533395,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=15904 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=16064,i,13605016993646584842,6423935416578560196,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=16104 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=16120,i,11753506421918926028,6720631717441178150,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=16132 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=16364,i,11821019269626875407,1392942706539085152,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=16392 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=16588,i,6270776282785945060,16328006429084800450,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=16060 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=16760,i,12720302479022429901,4526005597525086335,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=16752 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=16928,i,13240333224237059151,11803921634410155009,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=16932 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=16936,i,14019438298015578926,14902420297539477792,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=16952 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=17244,i,5410189034050699990,15895953367699099584,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=17256 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=17584,i,10326240882979501718,3217502063120062727,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=17444 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=17732,i,14759659867807103580,14904277380106992791,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=17748 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=17792,i,11947136849919993258,8788020619104046379,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=17924 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=17932,i,13578256771222197161,2272500784150353699,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=17984 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=18236,i,1574380642601743747,10223532416324490617,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=18268 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=18416,i,16649581737805461964,11184661547514974748,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=18404 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=18604,i,13373703703621439810,11480700505599449979,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=18612 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=18988,i,17131151650425143998,13316587615967225121,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=19020 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=17512,i,17459726085331718105,18336292076067402211,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=19288 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=19372,i,18103333528577635033,338725245832249906,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=19392 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=19592,i,11622291414784949905,14785746925198515691,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=19596 /prefetch:144⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=20188,i,1166657299952951729,12698039114384202088,524288 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=20268 /prefetch:144⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=20456,i,11847575672590737626,946323054342127514,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=20436 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=19320,i,9884623503827709269,10573329151467996019,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=20476 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=20760,i,3490093896203137686,580693490200246614,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=20768 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=21032,i,12742838879707884326,22182027117606056,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=21044 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=21608,i,14264592574236111348,7938330952264641704,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=21588 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=21184,i,11504284136118259412,1010460635544049675,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=21648 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=21996,i,12170615310486434987,1947465811091401936,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=21956 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=22236,i,12150162824844010392,13461524517788912132,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=21944 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=22064,i,10467821596838204892,11225376686649669497,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=22288 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=22616,i,13491891882083552239,16152219703677120553,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=22760 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=22936,i,12838337709633276872,15220535329512484486,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=22948 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=22952,i,17128501576764013253,556955345477046241,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=23084 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=23240,i,5796145310343734764,4676727152792974862,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=20372 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=22772,i,7668709714353230677,8660202219705234043,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=23276 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=23676,i,17958211119393936758,9412781151660540385,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=23704 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=23896,i,18076302777563678140,17605301562483500075,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=23912 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=24072,i,6810743445311427308,11697652793172683336,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=24104 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=24512,i,10814570178557471839,11100263694076150916,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=24532 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=24124,i,9193084429323128629,14179328110588412427,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=24704 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=11928,i,3110095804977311622,11478658859844705954,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=24872 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=25120,i,15013780084323319195,9979230060915807832,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=25124 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=25340,i,10314220504931437590,6943205754217925936,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=25356 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=25932,i,6205054841021501909,10358742887872965639,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=25936 /prefetch:14⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=26180,i,13733683105817867820,14897008537239595693,2097152 --field-trial-handle=2528,i,4851288722782609515,4249837888181419649,262144 --variations-seed-version --mojo-platform-channel-handle=26084 /prefetch:14⤵
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_1.html3⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 13⤵
- Executes a command shell one-liner
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_2.html3⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_3.html3⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_4.html3⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_5.html3⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_6.html3⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_7.html3⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_8.html3⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ggs_hello_9.html3⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 63⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 03⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 43⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 13⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 63⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 03⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 43⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 13⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 63⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 03⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 43⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 13⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 63⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 03⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 43⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 13⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 63⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 03⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 43⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 13⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 63⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 03⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 43⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 13⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 63⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 03⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 43⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 13⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 63⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 03⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 43⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 23⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 13⤵
- Executes a command shell one-liner
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 63⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 03⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 43⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color 23⤵
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start1⤵
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\UnblockConfirm.mp2v2⤵
- Opens file in notepad (likely ransom note)
-
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
13b80f80-12cb-4901-92a2-fd256529cd06.tmp
44e1b77d-0483-4231-b332-bec59f74a59e.tmp
6b8ed17d-904b-401a-90a7-0d4d982c8970.tmp
7a678f6b-4743-4e9a-8a41-a617627e1bd0.tmp
settings.dat
settings.dat
0819bf67-80b9-4a82-ab72-73c98ac16827.tmp
653f2cc5-2ce3-4aed-b74f-5c99d61f31eb.tmp
68549f1f-5129-456c-aa2f-c1d7996f0f73.tmp
79b35915-e821-4742-a23a-5546c2acbade.tmp
temp-index
temp-index
data_1
fcf13b39-e9ac-4686-8238-81c52ee38c24.tmp
0114aa9e-caa4-4241-b1dc-bca07fd9a2c2.tmp
269c4719-bfbf-43fb-9975-18bbca700752.tmp
495e6e58-78bc-44d8-b33a-ab5e0b666cf4.tmp
temp-index
the-real-index
index.txt.tmp
sync_diagnostic.log
b3b6fc58-0b4a-4a6b-bd54-0575028df0ed.tmp
c161f8aa-cfaf-446d-8d00-b00e1d78631e.tmp
ecaaebd5-ff28-4970-b603-0e6da7b488b7.tmp
BrowserMetrics-6AC96ABA-381C.pma
25c73eb4-b5a3-4bf7-b850-8fbea1d1064c.tmp
OperationConfig
a0b25ac1-2a7d-43a4-bd8c-9cfb83dcb412.tmp
afa3fdfe-6e56-4bdf-ae87-ac942d5a45c2.tmp
dfc04757-fff0-4c64-82c9-4a491d9d7af6.tmp
76246d6b-d490-4acc-a63a-ac17590dd11e.tmp
80aab0b5-eaaa-4e3f-9b05-3ce7c5305c63.tmp
91b22e6f-464f-431d-880f-21f87dad6600.tmp
python311.dll
VCRUNTIME140.dll
auto.tcl
clock.tcl
ascii.enc
big5.enc
cns11643.enc
cp1250.enc
cp1251.enc
cp1252.enc
cp1253.enc
cp1254.enc
cp1255.enc
cp1256.enc
cp1257.enc
cp1258.enc
cp437.enc
cp737.enc
cp775.enc
cp850.enc
cp852.enc
cp855.enc
cp857.enc
cp860.enc
cp861.enc
cp862.enc
cp863.enc
cp864.enc
cp865.enc
cp866.enc
cp869.enc
cp874.enc
cp932.enc
cp936.enc
cp949.enc
cp950.enc
dingbats.enc
ebcdic.enc
euc-jp.enc
euc-kr.enc
gb12345.enc
gb1988.enc
gb2312-raw.enc
iso2022-jp.enc
iso2022-kr.enc
iso2022.enc
iso8859-1.enc
iso8859-10.enc
iso8859-11.enc
iso8859-13.enc
iso8859-14.enc
iso8859-15.enc
iso8859-16.enc
iso8859-2.enc
iso8859-3.enc
iso8859-4.enc
iso8859-5.enc
iso8859-6.enc
iso8859-7.enc
iso8859-8.enc
iso8859-9.enc
jis0201.enc
jis0208.enc
jis0212.enc
koi8-r.enc
koi8-u.enc
ksc5601.enc
macCentEuro.enc
macCroatian.enc
macCyrillic.enc
macDingbats.enc
macGreek.enc
macIceland.enc
macJapan.enc
macRoman.enc
macRomania.enc
macThai.enc
macTurkish.enc
macUkraine.enc
shiftjis.enc
symbol.enc
tis-620.enc
history.tcl
http.tcl
pkgIndex.tcl
init.tcl
af.msg
af_za.msg
ar.msg
ar_in.msg
ar_jo.msg
ar_lb.msg
ar_sy.msg
be.msg
bg.msg
bn.msg
bn_in.msg
ca.msg
cs.msg
da.msg
de.msg
de_at.msg
de_be.msg
el.msg
en_au.msg
en_be.msg
en_bw.msg
en_ca.msg
en_gb.msg
en_hk.msg
en_ie.msg
en_in.msg
en_nz.msg
en_ph.msg
en_sg.msg
en_za.msg
en_zw.msg
eo.msg
es.msg
es_ar.msg
es_bo.msg
es_cl.msg
es_co.msg
es_cr.msg
es_do.msg
es_ec.msg
es_gt.msg
es_hn.msg
es_mx.msg
es_ni.msg
es_pa.msg
es_pe.msg
es_pr.msg
es_py.msg
es_sv.msg
es_uy.msg
es_ve.msg
et.msg
eu.msg
eu_es.msg
fa.msg
fa_in.msg
fa_ir.msg
fi.msg
fo.msg
fo_fo.msg
fr.msg
fr_be.msg
fr_ca.msg
fr_ch.msg
ga.msg
ga_ie.msg
gl.msg
gl_es.msg
gv.msg
gv_gb.msg
he.msg
hi.msg
hi_in.msg
hr.msg
hu.msg
id.msg
id_id.msg
is.msg
it.msg
it_ch.msg
ja.msg
kl.msg
kl_gl.msg
ko.msg
ko_kr.msg
kok.msg
kok_in.msg
kw.msg
kw_gb.msg
lt.msg
lv.msg
mk.msg
mr.msg
mr_in.msg
ms.msg
ms_my.msg
mt.msg
nb.msg
nl.msg
nl_be.msg
nn.msg
pl.msg
pt.msg
pt_br.msg
ro.msg
ru.msg
ru_ua.msg
sh.msg
sk.msg
sl.msg
sq.msg
sr.msg
sv.msg
sw.msg
ta.msg
ta_in.msg
te.msg
te_in.msg
th.msg
tr.msg
uk.msg
vi.msg
zh.msg
zh_cn.msg
zh_hk.msg
zh_sg.msg
zh_tw.msg
optparse.tcl
pkgIndex.tcl
package.tcl
parray.tcl
safe.tcl
tclIndex
tm.tcl
Abidjan
Accra
Addis_Ababa
Algiers
Asmara
Asmera
Bamako
Bangui
Banjul
Bissau
Blantyre
Brazzaville
Bujumbura
Cairo
Casablanca
Ceuta
Conakry
Dakar
Dar_es_Salaam
Djibouti
Douala
El_Aaiun
Freetown
Gaborone
Harare
Johannesburg
Juba
Kampala
Khartoum
Kigali
Kinshasa
Lagos
Libreville
Lome
Luanda
Lubumbashi
Lusaka
Malabo
Maputo
Maseru
Mbabane
Mogadishu
Monrovia
Nairobi
Ndjamena
Niamey
Nouakchott
Ouagadougou
Porto-Novo
Sao_Tome
Timbuktu
Tripoli
Tunis
Windhoek
Adak
Anchorage
Anguilla
Antigua
Araguaina
Buenos_Aires
Catamarca
ComodRivadavia
Cordoba
Jujuy
La_Rioja
Mendoza
Rio_Gallegos
Salta
San_Juan
San_Luis
Tucuman
Ushuaia
Aruba
Asuncion
Atikokan
Atka
Bahia
Bahia_Banderas
Barbados
Belem
Belize
Blanc-Sablon
Boa_Vista
Bogota
Boise
Buenos_Aires
Cambridge_Bay
Campo_Grande
Cancun
Caracas
Catamarca
Cayenne
Cayman
Chicago
Chihuahua
Coral_Harbour
Cordoba
Costa_Rica
Creston
Cuiaba
Curacao
Danmarkshavn
Dawson
Dawson_Creek
Denver
Detroit
Dominica
Edmonton
Eirunepe
El_Salvador
Ensenada
Fort_Nelson
Fort_Wayne
Fortaleza
Glace_Bay
Godthab
Goose_Bay
Grand_Turk
Grenada
Guadeloupe
Guatemala
Guayaquil
Guyana
Halifax
Havana
Hermosillo
Indianapolis
Knox
Marengo
Petersburg
Tell_City
Vevay
Vincennes
Winamac
Indianapolis
Inuvik
Iqaluit
Jamaica
Jujuy
Juneau
Louisville
Monticello
Knox_IN
Kralendijk
La_Paz
Lima
Los_Angeles
Louisville
Lower_Princes
Maceio
Managua
Manaus
Marigot
Martinique
Matamoros
Mazatlan
Mendoza
Menominee
Merida
Metlakatla
Mexico_City
Miquelon
Moncton
Monterrey
Montevideo
Montreal
Montserrat
Nassau
New_York
Nipigon
Nome
Noronha
Beulah
Center
New_Salem
Nuuk
Ojinaga
Panama
Pangnirtung
Paramaribo
Phoenix
Port-au-Prince
Port_of_Spain
Porto_Acre
Porto_Velho
Puerto_Rico
Punta_Arenas
Rainy_River
Rankin_Inlet
Recife
Regina
Resolute
Rio_Branco
Rosario
Santa_Isabel
Santarem
Santiago
Santo_Domingo
Sao_Paulo
Scoresbysund
Shiprock
Sitka
St_Barthelemy
St_Johns
St_Kitts
St_Lucia
St_Thomas
St_Vincent
Swift_Current
Tegucigalpa
Thule
Thunder_Bay
Tijuana
Toronto
Tortola
Vancouver
Virgin
Whitehorse
Winnipeg
Yakutat
Yellowknife
Casey
Davis
DumontDUrville
Macquarie
Mawson
McMurdo
Palmer
Rothera
South_Pole
Syowa
Troll
Vostok
Longyearbyen
Aden
Almaty
Amman
Anadyr
Aqtau
Aqtobe
Ashgabat
Ashkhabad
Atyrau
Baghdad
Bahrain
Baku
Bangkok
Barnaul
Beirut
Bishkek
Brunei
Calcutta
Chita
Choibalsan
Chongqing
Chungking
Colombo
Dacca
Damascus
Dhaka
Dili
Dubai
Dushanbe
Famagusta
Gaza
Harbin
Hebron
Ho_Chi_Minh
Hong_Kong
Hovd
Irkutsk
Istanbul
Jakarta
Jayapura
Jerusalem
Kabul
Kamchatka
Karachi
Kashgar
Kathmandu
Katmandu
Khandyga
Kolkata
Krasnoyarsk
Kuala_Lumpur
Kuching
Kuwait
Macao
Macau
Magadan
Makassar
Manila
Muscat
Nicosia
Novokuznetsk
Novosibirsk
Omsk
Oral
Phnom_Penh
Pontianak
Pyongyang
Qatar
Qostanay
Qyzylorda
Rangoon
Riyadh
Saigon
Sakhalin
Samarkand
Seoul
Shanghai
Singapore
Srednekolymsk
Taipei
Tashkent
Tbilisi
Tehran
Tel_Aviv
Thimbu
Thimphu
Tokyo
Tomsk
Ujung_Pandang
Ulaanbaatar
Ulan_Bator
Urumqi
Ust-Nera
Vientiane
Vladivostok
Yakutsk
Yangon
Yekaterinburg
Yerevan
Azores
Bermuda
Canary
Cape_Verde
Faeroe
Faroe
Jan_Mayen
Madeira
Reykjavik
South_Georgia
St_Helena
Stanley
ACT
Adelaide
Brisbane
Broken_Hill
Canberra
Currie
Darwin
Eucla
Hobart
LHI
Lindeman
Lord_Howe
Melbourne
NSW
North
Perth
Queensland
South
Sydney
Tasmania
Victoria
West
Yancowinna
Acre
DeNoronha
East
West
CET
CST6CDT
Atlantic
Central
East-Saskatchewan
Eastern
Mountain
Newfoundland
Pacific
Saskatchewan
Yukon
Continental
EasterIsland
Cuba
EET
EST
EST5EDT
Egypt
Eire
GMT
GMT+0
GMT+1
GMT+10
GMT+11
GMT+12
GMT+2
GMT+3
GMT+4
GMT+5
GMT+6
GMT+7
GMT+8
GMT+9
GMT-0
GMT-1
GMT-10
GMT-11
GMT-12
GMT-13
GMT-14
GMT-2
GMT-3
GMT-4
GMT-5
GMT-6
GMT-7
GMT-8
GMT-9
GMT0
Greenwich
UCT
UTC
Universal
Zulu
Amsterdam
Andorra
Astrakhan
Athens
Belfast
Belgrade
Berlin
Bratislava
Brussels
Bucharest
Budapest
Busingen
Chisinau
Copenhagen
Dublin
Gibraltar
Guernsey
Helsinki
Isle_of_Man
Istanbul
Jersey
Kaliningrad
Kiev
Kirov
Lisbon
Ljubljana
London
Luxembourg
Madrid
Malta
Mariehamn
Minsk
Monaco
Moscow
Nicosia
Oslo
Paris
Podgorica
Prague
Riga
Rome
Samara
San_Marino
Sarajevo
Saratov
Simferopol
Skopje
Sofia
Stockholm
Tallinn
Tirane
Tiraspol
Ulyanovsk
Uzhgorod
Vaduz
Vatican
Vienna
Vilnius
Volgograd
Warsaw
Zagreb
Zaporozhye
Zurich
GB
GB-Eire
GMT
GMT+0
GMT-0
GMT0
Greenwich
HST
Hongkong
Iceland
Antananarivo
Chagos
Christmas
Cocos
Comoro
Kerguelen
Mahe
Maldives
Mauritius
Mayotte
Reunion
Iran
Israel
Jamaica
Japan
Kwajalein
Libya
MET
MST
MST7MDT
BajaNorte
BajaSur
General
NZ
NZ-CHAT
Navajo
PRC
PST8PDT
Apia
Auckland
Bougainville
Chatham
Chuuk
Easter
Efate
Enderbury
Fakaofo
Fiji
Funafuti
Galapagos
Gambier
Guadalcanal
Guam
Honolulu
Johnston
Kanton
Kiritimati
Kosrae
Kwajalein
Majuro
Marquesas
Midway
Nauru
Niue
Norfolk
Noumea
Pago_Pago
Palau
Pitcairn
Pohnpei
Ponape
Port_Moresby
Rarotonga
Saipan
Samoa
Tahiti
Tarawa
Tongatapu
Truk
Wake
Wallis
Yap
Poland
Portugal
ROC
ROK
Singapore
AST4
AST4ADT
CST6
CST6CDT
EST5
EST5EDT
HST10
MST7
MST7MDT
PST8
PST8PDT
YST9
YST9YDT
Turkey
UCT
Alaska
Aleutian
Arizona
Central
East-Indiana
Eastern
Hawaii
Indiana-Starke
Michigan
Mountain
Pacific
Pacific-New
Samoa
UTC
Universal
W-SU
WET
Zulu
word.tcl
bgerror.tcl
button.tcl
choosedir.tcl
clrpick.tcl
comdlg.tcl
console.tcl
dialog.tcl
entry.tcl
focus.tcl
fontchooser.tcl
iconlist.tcl
icons.tcl
README
logo.eps
logo100.gif
logo64.gif
logoLarge.gif
logoMed.gif
pwrdLogo.eps
pwrdLogo100.gif
pwrdLogo150.gif
pwrdLogo175.gif
pwrdLogo200.gif
pwrdLogo75.gif
tai-ku.gif
license.terms
listbox.tcl
megawidget.tcl
menu.tcl
mkpsenc.tcl
msgbox.tcl
cs.msg
da.msg
de.msg
el.msg
en.msg
en_gb.msg
eo.msg
es.msg
fr.msg
hu.msg
it.msg
nl.msg
pl.msg
pt.msg
ru.msg
sv.msg
obsolete.tcl
optMenu.tcl
palette.tcl
panedwindow.tcl
pkgIndex.tcl
safetk.tcl
scale.tcl
scrlbar.tcl
spinbox.tcl
tclIndex
tearoff.tcl
text.tcl
tk.tcl
tkfbox.tcl
altTheme.tcl
aquaTheme.tcl
button.tcl
clamTheme.tcl
classicTheme.tcl
combobox.tcl
cursors.tcl
defaults.tcl
entry.tcl
fonts.tcl
menubutton.tcl
notebook.tcl
panedwindow.tcl
progress.tcl
scale.tcl
scrollbar.tcl
sizegrip.tcl
spinbox.tcl
treeview.tcl
ttk.tcl
utils.tcl
vistaTheme.tcl
winTheme.tcl
xpTheme.tcl
unsupported.tcl
xmfbox.tcl
platform-1.0.18.tm
shell-1.1.4.tm
msgcat-1.6.1.tm
tcltest-2.5.3.tm
http-2.9.5.tm
VCRUNTIME140.dll
_bz2.pyd
_ctypes.pyd
_decimal.pyd
_hashlib.pyd
_lzma.pyd
_socket.pyd
_tkinter.pyd
base_library.zip
libcrypto-3-x64.dll
libffi-8.dll
python311.dll
select.pyd
tcl86t.dll
tk86t.dll
unicodedata.pyd
tcl86t.dll
tk86t.dll
gb2312.enc
libcrypto-3-x64.dll
libffi-8.dll
tcl86t.dll
tk86t.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
libcrypto-3-x64.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tcl86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
tk86t.dll
libffi-8.dll
ggs_hello_0.html
zbnvbpgg.exe