593419cbf9ed368d3cdf6b39306a477a7f67c0ead1ad04dc9d83c3ce1539bbb7

Analysis

max time kernel
4s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/11/2026, 18:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
infaz.exe
Size 1.4MB
Sample261101-wyncpsxvav
SHA256 593419cbf9ed368d3cdf6b39306a477a7f67c0ead1ad04dc9d83c3ce1539bbb7
MD5 6998906342bab703f224f7df8dcd17c0
SHA1 6c9fad17821d2f0ce959e3c911f57292df226141
SHA512 712abb2146050bac9f197dc46a0efbd1c26e4efe7f4c1faac42c9e851aef2a8b43ea08b9a9d78b89e255ea0c5f3bad1204fd334e2b3cd073ef72de3cc18e0cda
SSDEEP 24576:7Tif6hysWbIkDWYOJf82frKnHnNnjbNYYLIx5UPv:PiShysWbIkDWYOR822HrY
TLSH
T1BB659D0BA3B900EDD167D279C9065607EFB2B4051324ABDB5790CA662F23FE15F7A321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery evasion execution exploit persistence ransomware trojan

Malware Config

Signatures

Modifies Windows Defender DisableAntiSpyware settings 3 TTPs 2 IoCs

evasion trojan

Modify Registry

T1112

Windows Service

T1543.003

Disable or Modify Tools

T1562.001

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\DisableAntiSpyware = "0"	infaz.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\DisableAntiSpyware = "0"	infaz.exe

Modifies boot configuration data using bcdedit 1 TTPs 1 IoCs

ransomware evasion

Inhibit System Recovery

T1490

pid	Process
3632	bcdedit.exe

Deletes backup catalog 3 TTPs 2 IoCs

Uses wbadmin.exe to inhibit system recovery.

ransomware

Command and Scripting Interpreter

T1059

File Deletion

T1070.004

Inhibit System Recovery

T1490

pid	Process
4664	wbadmin.exe
1460	wbadmin.exe

Possible privilege escalation attempt 6 IoCs

exploit

pid	Process
696	takeown.exe
1704	icacls.exe
4268	takeown.exe
1344	takeown.exe
5012	icacls.exe
3912	takeown.exe

Disables service(s) 3 TTPs
defense_evasion execution

Windows Service
T1543.003

Service Stop
T1489

Service Execution
T1569.002

Modifies file permissions 1 TTPs 6 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
696	takeown.exe
1704	icacls.exe
4268	takeown.exe
1344	takeown.exe
5012	icacls.exe
3912	takeown.exe

Stops running service(s) 4 TTPs
defense_evasion execution

Windows Service
T1543.003

Impair Defenses
T1562

Service Stop
T1489

Service Execution
T1569.002

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SystemUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\infaz.exe"	infaz.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SystemUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\infaz.exe"	infaz.exe

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
15	discord.com
16	discord.com
17	discord.com

Looks up external IP address via web service 1 TTPs 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
12	api.ipify.org

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Windows Defender\uk-UA\ProtectionManagement.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\MpEvMsg.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\OfflineScannerShell.exe.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\it-IT\MpAsDesc.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\uk-UA\MpAsDesc.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\uk-UA\ProtectionManagement.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\EppManifest.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\ProtectionManagement_Uninstall.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\ProtectionManagement.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\EppManifest.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\shellext.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\ProtectionManagement_Uninstall.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\it-IT\EppManifest.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\MsMpRes.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\ProtectionManagement.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\EppManifest.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\OfflineScannerShell.exe.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\ProtectionManagement.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\EppManifest.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\MpEvMsg.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\ProtectionManagement.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\EppManifest.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\MpEvMsg.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\MsMpRes.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\it-IT\OfflineScannerShell.exe.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\ProtectionManagement.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\OfflineScannerShell.exe.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\EppManifest.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\MpAsDesc.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\EppManifest.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\ProtectionManagement.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\shellext.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\ProtectionManagement.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\MpAsDesc.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\it-IT\MsMpRes.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\uk-UA\MsMpRes.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\shellext.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\OfflineScannerShell.exe.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\uk-UA\EppManifest.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\MpAsDesc.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\MpEvMsg.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\ProtectionManagement.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\MpAsDesc.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\MsMpRes.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\ProtectionManagement_Uninstall.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\ProtectionManagement.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\it-IT\ProtectionManagement.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\ProtectionManagement_Uninstall.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\OfflineScannerShell.exe.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\shellext.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\ProtectionManagement_Uninstall.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\MpAsDesc.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\ProtectionManagement_Uninstall.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\ProtectionManagement.mfl	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\shellext.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\it-IT\MpEvMsg.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\MsMpRes.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\ja-JP\OfflineScannerShell.exe.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\MpAsDesc.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\de-DE\MpEvMsg.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\es-ES\shellext.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\ProtectionManagement.dll.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\it-IT\OfflineScannerShell.exe.mui	cmd.exe
File opened for modification	C:\Program Files\Windows Defender\it-IT\ProtectionManagement.dll.mui	cmd.exe

Launches sc.exe 4 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
1388	sc.exe
1988	sc.exe
5068	sc.exe
3204	sc.exe

Executes a command shell one-liner 1 TTPs 20 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1484	cmd.exe
2824	cmd.exe
4192	cmd.exe
416	cmd.exe
2852	cmd.exe
2100	cmd.exe
4768	cmd.exe
2756	cmd.exe
3496	cmd.exe
4076	cmd.exe
1580	cmd.exe
3236	cmd.exe
4404	cmd.exe
960	cmd.exe
3760	cmd.exe
4724	cmd.exe
4012	cmd.exe
3260	cmd.exe
4556	cmd.exe
3944	cmd.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
9244	msedge.exe
2096	msedge.exe

Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence execution

Scheduled Task

T1053.005

pid	Process
2560	schtasks.exe
2728	schtasks.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2224	infaz.exe
2224	infaz.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	4268	takeown.exe
Token: SeTakeOwnershipPrivilege	3912	takeown.exe
Token: SeBackupPrivilege	4852	wbengine.exe
Token: SeRestorePrivilege	4852	wbengine.exe
Token: SeSecurityPrivilege	4852	wbengine.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 3944	2224	infaz.exe	88
PID 3944 wrote to memory of 2560	3944	cmd.exe	90
PID 2224 wrote to memory of 1484	2224	infaz.exe	91
PID 1484 wrote to memory of 1388	1484	cmd.exe	93
PID 2224 wrote to memory of 3236	2224	infaz.exe	94
PID 3236 wrote to memory of 1988	3236	cmd.exe	96
PID 2224 wrote to memory of 2824	2224	infaz.exe	97
PID 2824 wrote to memory of 696	2824	cmd.exe	99
PID 2224 wrote to memory of 3760	2224	infaz.exe	101
PID 3760 wrote to memory of 1704	3760	cmd.exe	103
PID 1912 wrote to memory of 4192	1912	infaz.exe	105
PID 4192 wrote to memory of 2728	4192	cmd.exe	107
PID 2224 wrote to memory of 4724	2224	infaz.exe	108
PID 1912 wrote to memory of 4404	1912	infaz.exe	110
PID 2224 wrote to memory of 416	2224	infaz.exe	112
PID 4404 wrote to memory of 5068	4404	cmd.exe	114
PID 1912 wrote to memory of 4768	1912	infaz.exe	115
PID 416 wrote to memory of 4268	416	cmd.exe	117
PID 4768 wrote to memory of 3204	4768	cmd.exe	118
PID 1912 wrote to memory of 2852	1912	infaz.exe	119
PID 2852 wrote to memory of 1344	2852	cmd.exe	121
PID 1912 wrote to memory of 4556	1912	infaz.exe	122
PID 2224 wrote to memory of 1580	2224	infaz.exe	124
PID 4556 wrote to memory of 5012	4556	cmd.exe	126
PID 2224 wrote to memory of 2756	2224	infaz.exe	127
PID 1912 wrote to memory of 4012	1912	infaz.exe	129
PID 2756 wrote to memory of 3632	2756	cmd.exe	166
PID 2224 wrote to memory of 3496	2224	infaz.exe	132
PID 1912 wrote to memory of 960	1912	infaz.exe	134
PID 3496 wrote to memory of 4664	3496	cmd.exe	232
PID 960 wrote to memory of 3912	960	cmd.exe	247
PID 1912 wrote to memory of 3260	1912	infaz.exe	140
PID 1912 wrote to memory of 2100	1912	infaz.exe	143
PID 1912 wrote to memory of 4076	1912	infaz.exe	145

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\infaz.exe
"C:\Users\Admin\AppData\Local\Temp\infaz.exe"
1⤵
- Modifies Windows Defender DisableAntiSpyware settings
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c schtasks /create /tn "SystemUpdate" /tr "C:\Users\Admin\AppData\Local\Temp\infaz.exe" /sc onlogon /rl highest /f
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:3944
- - C:\Windows\system32\schtasks.exe
    schtasks /create /tn "SystemUpdate" /tr "C:\Users\Admin\AppData\Local\Temp\infaz.exe" /sc onlogon /rl highest /f
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:2560
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c sc stop WinDefend >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:1484
- - C:\Windows\system32\sc.exe
    sc stop WinDefend
    3⤵
    - Launches sc.exe
    PID:1388
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c sc config WinDefend start= disabled >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:3236
- - C:\Windows\system32\sc.exe
    sc config WinDefend start= disabled
    3⤵
    - Launches sc.exe
    PID:1988
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c takeown /f "C:\ProgramData\Microsoft\Windows Defender" /r /d y >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:2824
- - C:\Windows\system32\takeown.exe
    takeown /f "C:\ProgramData\Microsoft\Windows Defender" /r /d y
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:696
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c icacls "C:\ProgramData\Microsoft\Windows Defender" /grant administrators:F /t >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:3760
- - C:\Windows\system32\icacls.exe
    icacls "C:\ProgramData\Microsoft\Windows Defender" /grant administrators:F /t
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:1704
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c rd /s /q "C:\ProgramData\Microsoft\Windows Defender" >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:4724
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c takeown /f "C:\Program Files\Windows Defender" /r /d y >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:416
- - C:\Windows\system32\takeown.exe
    takeown /f "C:\Program Files\Windows Defender" /r /d y
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    - Suspicious use of AdjustPrivilegeToken
    PID:4268
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c rd /s /q "C:\Program Files\Windows Defender" >nul 2>&1
  2⤵
  - Drops file in Program Files directory
  - Executes a command shell one-liner
  PID:1580
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled No >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:2756
- - C:\Windows\system32\bcdedit.exe
    bcdedit /set {default} recoveryenabled No
    3⤵
    - Modifies boot configuration data using bcdedit
    PID:3632
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:3496
- - C:\Windows\system32\wbadmin.exe
    wbadmin delete catalog -quiet
    3⤵
    - Deletes backup catalog
    PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x338,0x7ffaec45c188,0x7ffaec45c194,0x7ffaec45c1a0
    3⤵
    PID:1876
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=fallback-handler --database="C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --exception-pointers=132594231263408 --process=256 /prefetch:7 --thread=7592
      4⤵
      PID:6312
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=fallback-handler --database="C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --exception-pointers=132594231263408 --process=256 /prefetch:7 --thread=6400
      4⤵
      PID:7132
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=fallback-handler --database="C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --exception-pointers=132594231263408 --process=256 /prefetch:7 --thread=3516
      4⤵
      PID:4824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1824,i,620016338040660067,10039666499293752133,262144 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
    3⤵
    PID:3012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,763603187503093619,9671967719849916740,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,17331171677577016224,7394056298146692038,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:8
    3⤵
    PID:2980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,6725868458272812944,7309346209586225070,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
    3⤵
    PID:4832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,15999615526631374524,7724192896570369277,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
    3⤵
    PID:1464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,4874007491188305227,9116950404139763933,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
    3⤵
    PID:4632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,8199967224781049980,10674580084642345123,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:2
    3⤵
    PID:3304
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4788,i,11745480102064700526,4979906997653227755,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:1
    3⤵
    PID:4696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,1180887130739031563,6708295202332018548,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:8
    3⤵
    PID:2976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,8317524852655002439,11676631418037961153,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
    3⤵
    PID:2116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5592,i,3659639440416483344,5227665954092068277,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:1
    3⤵
    PID:3472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5736,i,11824696297684554335,14371321218784630729,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:1
    3⤵
    PID:3632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5896,i,5477653336331277488,16024005327803429108,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:1
    3⤵
    PID:4832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6084,i,7648820008113178568,2769874991608162271,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:1
    3⤵
    PID:2728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4228,i,6564388876744897546,11568881189705039440,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:8
    3⤵
    PID:2076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,17074165438039157031,14354876041198462107,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
    3⤵
    PID:5124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6756,i,1614216347703331555,14475259482389166269,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:1
    3⤵
    PID:5228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6900,i,15360528954215874948,15318557874208613230,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
    3⤵
    PID:5380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=3648,i,15709488431722685947,2232967232980340783,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:1
    3⤵
    PID:5516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5252,i,8282847631303089633,4649742652200419381,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5740 /prefetch:1
    3⤵
    PID:4380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5604,i,11097255994972926279,2050382455567636707,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:1
    3⤵
    PID:3208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4000,i,194861804091172760,3802703750865230594,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:1
    3⤵
    PID:5536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=4348,i,16560624058143254090,4268853313616163867,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:1
    3⤵
    PID:4084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5704,i,4397494152166152898,14436483450244107279,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:1
    3⤵
    PID:2572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5680,i,9028826100911229627,2732995227191999655,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:1
    3⤵
    PID:5540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=5208,i,15636346994739425949,14637539152840109867,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:1
    3⤵
    PID:5548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7764,i,10556803757557643380,12117257654862490030,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:1
    3⤵
    PID:5608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8360,i,12828974627873294440,5994117817799582418,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8372 /prefetch:1
    3⤵
    PID:5760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8580,i,4199639183308723363,12824444249757011740,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8544 /prefetch:1
    3⤵
    PID:5888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8720,i,14892219774073990313,1265558060674963670,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8736 /prefetch:1
    3⤵
    PID:5948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=4288,i,10307890475311777118,11350718562001132091,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:1
    3⤵
    PID:5504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=5700,i,1664607637382500859,8991472062087356274,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8888 /prefetch:1
    3⤵
    PID:5308
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,11365197027687527197,2848983445679681925,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9064 /prefetch:8
    3⤵
    PID:5020
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,11365197027687527197,2848983445679681925,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9064 /prefetch:8
    3⤵
    PID:5868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=9076,i,11195741837143872268,15816835333734520786,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=7680 /prefetch:1
    3⤵
    PID:2996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=4508,i,13368938369109390569,15561556584943762298,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:1
    3⤵
    PID:4320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=6940,i,310877237909992409,15421892893796677880,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:1
    3⤵
    PID:2156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8600,i,8188606616664807822,2284639611652909215,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9236 /prefetch:1
    3⤵
    PID:936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9368,i,14490398471607651444,14052272146263545818,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9396 /prefetch:1
    3⤵
    PID:3332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9552,i,12253539176970704355,2511699933554557348,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9564 /prefetch:1
    3⤵
    PID:5500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9692,i,5415302130755171848,9022180241265678031,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9700 /prefetch:1
    3⤵
    PID:3520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9848,i,4219718345293662957,14229372491069465782,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9864 /prefetch:1
    3⤵
    PID:1388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=10024,i,3300026231552341792,7381954011007766571,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10040 /prefetch:1
    3⤵
    PID:3376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=10188,i,2009680425020615565,3497808600460248780,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10200 /prefetch:1
    3⤵
    PID:3660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=10380,i,9017935214219050865,14025557848710026475,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10396 /prefetch:1
    3⤵
    PID:884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10524,i,265827202917196448,16004492731723343077,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10516 /prefetch:8
    3⤵
    PID:1988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8296,i,10936410170276269344,17605048852363024174,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10552 /prefetch:8
    3⤵
    PID:840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10528,i,15504723177904262222,3700856741881797607,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10564 /prefetch:8
    3⤵
    PID:5564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=9264,i,5929492217894852874,13033267693063012631,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10668 /prefetch:1
    3⤵
    PID:4720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=10172,i,16353087358453478189,12255899181301934238,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10148 /prefetch:1
    3⤵
    PID:7076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=7396,i,5433924115912565793,3434788584477687980,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:1
    3⤵
    PID:7104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=8296,i,6104926098716660746,6727204101316657036,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10588 /prefetch:1
    3⤵
    PID:7144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=10520,i,17665484973658921855,13370867900881582804,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9728 /prefetch:1
    3⤵
    PID:4664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=9816,i,848640942055045873,3475217242360549478,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9868 /prefetch:1
    3⤵
    PID:6324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=10688,i,13095107642437333943,1716110582633364343,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:1
    3⤵
    PID:6336
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=6580,i,8405293625761120806,5365216285401042322,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9344 /prefetch:1
    3⤵
    PID:6972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=6544,i,13030544324392482259,1399525499982077826,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10792 /prefetch:1
    3⤵
    PID:5516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=11188,i,6290025948470182174,1537270722523577055,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=11200 /prefetch:1
    3⤵
    PID:6528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=11380,i,13353512921247497233,15756369078869988466,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=11392 /prefetch:1
    3⤵
    PID:6788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=11396,i,15642707691655303836,10524377711809835939,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=11416 /prefetch:1
    3⤵
    PID:2324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=11672,i,8234179752250126609,15121429070928856484,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=11684 /prefetch:1
    3⤵
    PID:7164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --metrics-shmem-handle=6212,i,3688605702925574278,17042684650306607618,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8824 /prefetch:1
    3⤵
    PID:6520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=12256,i,707711683266554531,15879939600808976940,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12260 /prefetch:1
    3⤵
    PID:5372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --always-read-main-dll --metrics-shmem-handle=12328,i,16694069110439581395,7760626287562769032,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12344 /prefetch:1
    3⤵
    PID:6960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=12400,i,10902989178847317453,4403808872598063616,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12368 /prefetch:1
    3⤵
    PID:3752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=12712,i,17695105277402709056,14711926591404283025,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12732 /prefetch:1
    3⤵
    PID:1988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=12284,i,13749782641520227989,2543364314039795858,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:1
    3⤵
    PID:5844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=9720,i,7938847638972424510,5908943639467831487,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10224 /prefetch:1
    3⤵
    PID:7044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=6704,i,8474202099810603892,4060928299269522509,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12912 /prefetch:1
    3⤵
    PID:5196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=13164,i,15538231931155497275,13897631679581856407,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13168 /prefetch:1
    3⤵
    PID:6672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=13344,i,3248040419777854915,13302301365117586662,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13360 /prefetch:1
    3⤵
    PID:2564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=6244,i,957227274970271759,6722446705918984289,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:1
    3⤵
    PID:2568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=13548,i,2232063217119361208,215937788294512921,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13560 /prefetch:1
    3⤵
    PID:4812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=13712,i,3466893848221282728,16138777252243855908,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13736 /prefetch:1
    3⤵
    PID:6424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=13868,i,1526405357619874146,3857008795930190942,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13864 /prefetch:1
    3⤵
    PID:6784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=11688,i,4776827048015534203,14153153935866579735,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14052 /prefetch:1
    3⤵
    PID:6456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=12276,i,2271911159614851856,5338753223389573874,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14184 /prefetch:1
    3⤵
    PID:7092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=14300,i,7894245053051378466,4685691450440591907,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12184 /prefetch:1
    3⤵
    PID:7184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=14488,i,9434436157361848486,5705953652442368445,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14480 /prefetch:1
    3⤵
    PID:7264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=14512,i,2692055961922822443,5976997570277765965,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14652 /prefetch:1
    3⤵
    PID:7308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=13996,i,14250398703366647282,5224798327151750510,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14808 /prefetch:1
    3⤵
    PID:7388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=14964,i,6691810283733414711,8639606767330977358,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14516 /prefetch:1
    3⤵
    PID:7572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=12352,i,7775672104366830751,3979884987488435489,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12696 /prefetch:1
    3⤵
    PID:7580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=15240,i,8581499677680978227,17301936861746050006,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15244 /prefetch:1
    3⤵
    PID:7668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=13316,i,10154272672530536218,4548740834720655582,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15392 /prefetch:1
    3⤵
    PID:7780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=15528,i,6056828879721501608,7405122793179636912,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15516 /prefetch:1
    3⤵
    PID:7812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=15644,i,2753659775131608305,12232691924238246993,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15652 /prefetch:1
    3⤵
    PID:7908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=15792,i,7449665481791870856,374911483136473771,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15836 /prefetch:1
    3⤵
    PID:8056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=14964,i,12039840263345383094,371094494647224622,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15828 /prefetch:1
    3⤵
    PID:8164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=8360,i,2710107469813014399,16890883577700449079,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8396 /prefetch:1
    3⤵
    PID:2256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=15808,i,15986426449836791301,6703898361750368562,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=16208 /prefetch:1
    3⤵
    PID:5464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --always-read-main-dll --metrics-shmem-handle=16336,i,13899118210923784553,6718950651437232621,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8568 /prefetch:1
    3⤵
    PID:7588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --always-read-main-dll --metrics-shmem-handle=16120,i,4739299574897496637,9293042925170999473,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:1
    3⤵
    PID:992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12756,i,7002083567230300249,16830462535561049270,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12760 /prefetch:8
    3⤵
    PID:8656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=13836,i,12286846654302879092,18309089094206156835,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12544 /prefetch:1
    3⤵
    PID:8912
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=10648,i,6095371217163135140,3761611561114569643,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12148 /prefetch:1
    3⤵
    PID:10096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=7780,i,12315328452374555169,4335120463659251637,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:1
    3⤵
    PID:10140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8772,i,8393278855832010339,9775825558969134795,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
    3⤵
    - System Time Discovery
    PID:9244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=11128,i,6081331905186395047,3011842968449132665,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:1
    3⤵
    PID:9100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=5868,i,7521628596811602340,2917670996249644621,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:1
    3⤵
    PID:5920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=5856,i,14158507609836581288,8249008064743008876,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:1
    3⤵
    PID:1656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=12036,i,15847514816169464633,14079203674504068949,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=11888 /prefetch:1
    3⤵
    PID:5148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=11052,i,1910191115257946027,8192874799271018417,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9376 /prefetch:1
    3⤵
    PID:8872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=16048,i,3820506529890116180,5198257447393959331,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8204 /prefetch:1
    3⤵
    PID:8812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=15948,i,747875637354774058,11787239836974830263,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15812 /prefetch:1
    3⤵
    PID:8308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=15916,i,4090353806350265954,17724772517636243866,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15872 /prefetch:1
    3⤵
    PID:8388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=14728,i,11722644886676644957,9958326859761325628,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14720 /prefetch:1
    3⤵
    PID:8376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=6136,i,252279884891640845,5047808652448617696,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8880 /prefetch:1
    3⤵
    PID:5544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9316,i,5041764340806189756,3586062138631831971,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:8
    3⤵
    PID:9352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=5164,i,1984577856501862482,14392550159582373609,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13180 /prefetch:1
    3⤵
    PID:9576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=9936,i,640221328922327015,12341923218873341151,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9888 /prefetch:1
    3⤵
    PID:9628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=9908,i,13615042505977858424,15127455260287106315,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9856 /prefetch:1
    3⤵
    PID:9728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=15476,i,14503583196092294498,15900031467166411859,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8876 /prefetch:1
    3⤵
    PID:9780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=14944,i,14497372880404121523,10445443880536166297,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
    3⤵
    PID:7984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=14308,i,255077555180767615,4042784603655572894,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15256 /prefetch:1
    3⤵
    PID:10132
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=14876,i,2275941670583234559,4253268983187815437,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14412 /prefetch:1
    3⤵
    PID:9180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=5992,i,16393311121069687650,36654597518386048,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:1
    3⤵
    PID:1784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=11396,i,8037899423708305273,12293334221689350952,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15456 /prefetch:1
    3⤵
    PID:3208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=15664,i,9764661574922630625,12488059046130123182,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15016 /prefetch:1
    3⤵
    PID:7864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --metrics-shmem-handle=8196,i,9861355285845469211,9002582177344946167,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8168 /prefetch:1
    3⤵
    PID:7476
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=15032,i,11491480862406668207,17779960487168590602,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15724 /prefetch:1
    3⤵
    PID:7488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --always-read-main-dll --metrics-shmem-handle=4312,i,184810774448960234,18165177889503113577,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8524 /prefetch:1
    3⤵
    PID:6596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --always-read-main-dll --metrics-shmem-handle=7760,i,11033384676283309226,2719415994757587580,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:1
    3⤵
    PID:5728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --always-read-main-dll --metrics-shmem-handle=5392,i,16259019434651583704,7678178845589254131,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:1
    3⤵
    PID:5560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --always-read-main-dll --metrics-shmem-handle=7548,i,8304331026618752742,10963476243160413128,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:1
    3⤵
    PID:8096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --always-read-main-dll --metrics-shmem-handle=11384,i,7755323702386442626,5526029026866959032,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:1
    3⤵
    PID:6256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --always-read-main-dll --metrics-shmem-handle=3960,i,1602648292742740705,1608305351452927636,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:1
    3⤵
    PID:6780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --always-read-main-dll --metrics-shmem-handle=11520,i,8925190002805720746,3680280894060036076,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8684 /prefetch:1
    3⤵
    PID:8888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --always-read-main-dll --metrics-shmem-handle=7688,i,8711467896537264251,4644593429230128950,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8292 /prefetch:1
    3⤵
    PID:9368
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --always-read-main-dll --metrics-shmem-handle=5512,i,1772610595692410431,16956892314044903892,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8648 /prefetch:1
    3⤵
    PID:1196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --always-read-main-dll --metrics-shmem-handle=8472,i,12369600230098824115,18216188126272826235,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8484 /prefetch:1
    3⤵
    PID:7376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --always-read-main-dll --metrics-shmem-handle=13280,i,3725430754478231764,14298539857246324743,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13140 /prefetch:1
    3⤵
    PID:2188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --always-read-main-dll --metrics-shmem-handle=13284,i,15829596639276834280,14265097787017143754,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:1
    3⤵
    PID:10168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --always-read-main-dll --metrics-shmem-handle=13956,i,9197201521359888835,5249318185462228439,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13976 /prefetch:1
    3⤵
    PID:8320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --always-read-main-dll --metrics-shmem-handle=14076,i,206799402132396560,16774880994515626057,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14244 /prefetch:1
    3⤵
    PID:7624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --always-read-main-dll --metrics-shmem-handle=13292,i,9728610194977600507,17510612500280906110,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6932 /prefetch:1
    3⤵
    PID:8488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --always-read-main-dll --metrics-shmem-handle=13140,i,15744827568589172381,4617707679119608442,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10420 /prefetch:1
    3⤵
    PID:6060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --always-read-main-dll --metrics-shmem-handle=7996,i,1062462717503436310,16897123195850660989,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8172 /prefetch:1
    3⤵
    PID:5732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --always-read-main-dll --metrics-shmem-handle=10424,i,16090126197757075241,15171159756844329691,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:1
    3⤵
    PID:7140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --always-read-main-dll --metrics-shmem-handle=9880,i,879438482142559408,3498022790456144225,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15016 /prefetch:1
    3⤵
    PID:2860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --always-read-main-dll --metrics-shmem-handle=7524,i,8633750987066531020,2022147370473183990,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:1
    3⤵
    PID:8300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --always-read-main-dll --metrics-shmem-handle=11636,i,11853147167300965736,16480729946001576763,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10320 /prefetch:1
    3⤵
    PID:8404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --always-read-main-dll --metrics-shmem-handle=6004,i,7210290775701259087,7464529672018348730,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:1
    3⤵
    PID:6792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --always-read-main-dll --metrics-shmem-handle=14204,i,17682646206060624561,8863196820789541070,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=1928 /prefetch:1
    3⤵
    PID:6712
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --always-read-main-dll --metrics-shmem-handle=14248,i,1139554638424675276,7992413679123134929,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=11632 /prefetch:1
    3⤵
    PID:2352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=177 --always-read-main-dll --metrics-shmem-handle=6908,i,7273694546540172033,8538623223061945129,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15124 /prefetch:1
    3⤵
    PID:8280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=178 --always-read-main-dll --metrics-shmem-handle=5356,i,16979368059950977545,4250940676236622826,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:1
    3⤵
    PID:9568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=179 --always-read-main-dll --metrics-shmem-handle=10512,i,5517053323528836331,9847826945277737614,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=3980 /prefetch:1
    3⤵
    PID:5232
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=180 --always-read-main-dll --metrics-shmem-handle=3948,i,13756312365696116873,3369036239741138679,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8664 /prefetch:1
    3⤵
    PID:5724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8496,i,15693611411514320243,8374698181334734475,524288 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
    3⤵
    PID:9124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=182 --always-read-main-dll --metrics-shmem-handle=7752,i,9932192712763744973,365955849048986407,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15180 /prefetch:1
    3⤵
    PID:9120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=183 --always-read-main-dll --metrics-shmem-handle=6348,i,6216382955592622929,8266341492395410120,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13532 /prefetch:1
    3⤵
    PID:8592
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=184 --always-read-main-dll --metrics-shmem-handle=6252,i,16211735240877980771,9154968376203310804,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15564 /prefetch:1
    3⤵
    PID:8556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=185 --always-read-main-dll --metrics-shmem-handle=4788,i,7795965597796234552,6203577910019172416,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13300 /prefetch:1
    3⤵
    PID:4528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=186 --always-read-main-dll --metrics-shmem-handle=10900,i,2255409178938240737,1466965747034171303,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15624 /prefetch:1
    3⤵
    PID:1240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=187 --always-read-main-dll --metrics-shmem-handle=6760,i,18212191667263648952,71127588160351995,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15596 /prefetch:1
    3⤵
    PID:3776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=188 --always-read-main-dll --metrics-shmem-handle=8444,i,4367680582882642872,948366070350714130,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15576 /prefetch:1
    3⤵
    PID:1456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=189 --always-read-main-dll --metrics-shmem-handle=15048,i,11861657210395562310,16147675576233341650,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15628 /prefetch:1
    3⤵
    PID:3196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=190 --always-read-main-dll --metrics-shmem-handle=3668,i,84354404971819535,522706705569515925,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9792 /prefetch:1
    3⤵
    PID:4376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=191 --always-read-main-dll --metrics-shmem-handle=15068,i,7281513759001701339,13489816427880214060,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15244 /prefetch:1
    3⤵
    PID:7828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=192 --always-read-main-dll --metrics-shmem-handle=13604,i,7334981187952405004,13401590941675408509,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9680 /prefetch:1
    3⤵
    PID:668
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=193 --always-read-main-dll --metrics-shmem-handle=11976,i,3678249306549414426,1453025216730761610,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15252 /prefetch:1
    3⤵
    PID:3080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=194 --always-read-main-dll --metrics-shmem-handle=9904,i,17676608595556451306,8195520248659921625,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14840 /prefetch:1
    3⤵
    PID:3352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=6356,i,1075675396777801969,8298669217837247749,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:1
    3⤵
    PID:8580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=196 --always-read-main-dll --metrics-shmem-handle=10416,i,2291625243658677547,187427697695747763,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10460 /prefetch:1
    3⤵
    PID:5992
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=197 --always-read-main-dll --metrics-shmem-handle=6944,i,12927569509292096892,9534318576874612466,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=16144 /prefetch:1
    3⤵
    PID:408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=198 --always-read-main-dll --metrics-shmem-handle=10780,i,4021050082410750013,16563718345094145370,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10704 /prefetch:1
    3⤵
    PID:6176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=204 --always-read-main-dll --metrics-shmem-handle=15844,i,560136921761027692,15769965253155365765,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:1
    3⤵
    PID:5700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=205 --always-read-main-dll --metrics-shmem-handle=7556,i,5686355424983233601,12762608804647998006,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10728 /prefetch:1
    3⤵
    PID:8620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=206 --always-read-main-dll --metrics-shmem-handle=13988,i,15266672551030296484,3562103025895982923,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14476 /prefetch:1
    3⤵
    PID:7644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=207 --always-read-main-dll --metrics-shmem-handle=11380,i,6115097553041770875,17295462132374041457,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:1
    3⤵
    PID:6776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=208 --always-read-main-dll --metrics-shmem-handle=12068,i,8273568326620862597,2121007115829977860,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
    3⤵
    PID:5932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=209 --always-read-main-dll --metrics-shmem-handle=7912,i,3451656637190571922,2505024107133965162,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15192 /prefetch:1
    3⤵
    PID:6796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=210 --always-read-main-dll --metrics-shmem-handle=13364,i,7996160233589391322,17882964888533072852,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15364 /prefetch:1
    3⤵
    PID:5524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=211 --always-read-main-dll --metrics-shmem-handle=13580,i,15881974861233362390,14465682308081181299,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9232 /prefetch:1
    3⤵
    PID:4920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=212 --always-read-main-dll --metrics-shmem-handle=8804,i,1192544908854906569,16660501974329677884,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10156 /prefetch:1
    3⤵
    PID:1732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=213 --always-read-main-dll --metrics-shmem-handle=13404,i,8749862012790593850,4120162316542448169,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13472 /prefetch:1
    3⤵
    PID:5388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=214 --always-read-main-dll --metrics-shmem-handle=15468,i,16306675932079624875,10589073558273810713,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:1
    3⤵
    PID:6224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=215 --always-read-main-dll --metrics-shmem-handle=5344,i,12365720895946973923,5573027967229280927,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=11396 /prefetch:1
    3⤵
    PID:10020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=216 --always-read-main-dll --metrics-shmem-handle=7472,i,10059587389422470113,1129886164015858292,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=15288 /prefetch:1
    3⤵
    PID:9032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=217 --always-read-main-dll --metrics-shmem-handle=5544,i,11225364816615622632,2148322304251205877,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14660 /prefetch:1
    3⤵
    PID:6620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=218 --always-read-main-dll --metrics-shmem-handle=7464,i,17469041361818065066,14262508152031622042,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=7928 /prefetch:1
    3⤵
    PID:6792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=219 --always-read-main-dll --metrics-shmem-handle=8384,i,14662481768557682107,7169230392075863809,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8684 /prefetch:1
    3⤵
    PID:7292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=220 --always-read-main-dll --metrics-shmem-handle=11652,i,1232596993407245757,12213128756365535081,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14112 /prefetch:1
    3⤵
    PID:9572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=221 --always-read-main-dll --metrics-shmem-handle=10944,i,3189601474483049092,17165784690438246019,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=10916 /prefetch:1
    3⤵
    PID:7896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=222 --always-read-main-dll --metrics-shmem-handle=10760,i,4783671890888908824,8911861645968689323,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8408 /prefetch:1
    3⤵
    PID:9168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=223 --always-read-main-dll --metrics-shmem-handle=13252,i,16645988138751128153,8644211722041014244,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14736 /prefetch:1
    3⤵
    PID:7856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=224 --always-read-main-dll --metrics-shmem-handle=13188,i,16455927916693800772,13924901693994594565,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=11384 /prefetch:1
    3⤵
    PID:6332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=225 --always-read-main-dll --metrics-shmem-handle=11188,i,4538252616655852887,11856724386198169933,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:1
    3⤵
    PID:8012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=226 --always-read-main-dll --metrics-shmem-handle=8448,i,527650567725932760,2783663685346668027,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14628 /prefetch:1
    3⤵
    PID:4624
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=227 --always-read-main-dll --metrics-shmem-handle=7748,i,11054355943552989425,9549606062404041983,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=7676 /prefetch:1
    3⤵
    PID:6768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=228 --always-read-main-dll --metrics-shmem-handle=8992,i,6458004647474098001,16180248510117756214,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:1
    3⤵
    PID:7220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=229 --always-read-main-dll --metrics-shmem-handle=6596,i,4487207474779862984,12557534048077604904,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=7328 /prefetch:1
    3⤵
    PID:6456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=230 --always-read-main-dll --metrics-shmem-handle=7308,i,11815753503782515765,1666892622093260234,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=7248 /prefetch:1
    3⤵
    PID:7340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=231 --always-read-main-dll --metrics-shmem-handle=9884,i,1355383964695204206,17700053546144495027,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:1
    3⤵
    PID:8744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=232 --always-read-main-dll --metrics-shmem-handle=7608,i,10304968586673510619,6328312700569961681,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9164 /prefetch:1
    3⤵
    PID:9756
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=233 --always-read-main-dll --metrics-shmem-handle=9116,i,200794991876227450,14961346593222059381,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14416 /prefetch:1
    3⤵
    PID:9720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=234 --always-read-main-dll --metrics-shmem-handle=8244,i,18157962204633522955,10518989253662706645,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:1
    3⤵
    PID:8468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=235 --always-read-main-dll --metrics-shmem-handle=7840,i,6442579117990281246,8183926037983863818,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:1
    3⤵
    PID:10176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=236 --always-read-main-dll --metrics-shmem-handle=13316,i,8777841106413057595,11243365622318964578,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13752 /prefetch:1
    3⤵
    PID:9276
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=15020,i,12037815455086733554,888201605961820769,262144 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=14468 /prefetch:8
    3⤵
    PID:3204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=238 --always-read-main-dll --metrics-shmem-handle=13588,i,693273887753845004,5666382221621137414,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:1
    3⤵
    PID:6328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=239 --always-read-main-dll --metrics-shmem-handle=13700,i,8016898936970321008,11569442112480172306,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13556 /prefetch:1
    3⤵
    PID:8748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=240 --always-read-main-dll --metrics-shmem-handle=12556,i,14897353121645762319,8964325090239881595,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=13144 /prefetch:1
    3⤵
    PID:5820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=241 --always-read-main-dll --metrics-shmem-handle=11684,i,2628786288735794433,15904842646879606733,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=11804 /prefetch:1
    3⤵
    PID:6876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=242 --always-read-main-dll --metrics-shmem-handle=12468,i,3284312972338067521,7832922976786398164,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12476 /prefetch:1
    3⤵
    PID:1788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=243 --always-read-main-dll --metrics-shmem-handle=12580,i,7618800884038182856,11705082489528553498,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=16464 /prefetch:1
    3⤵
    PID:6760
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=244 --always-read-main-dll --metrics-shmem-handle=8856,i,1917718356241988176,10465211986194585538,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=12516 /prefetch:1
    3⤵
    PID:8836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=245 --always-read-main-dll --metrics-shmem-handle=16536,i,2750739557483857287,12823588377577360246,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=8832 /prefetch:1
    3⤵
    PID:9432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=246 --always-read-main-dll --metrics-shmem-handle=16668,i,12706515767973688258,13281451619633660590,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=11176 /prefetch:1
    3⤵
    PID:8548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=247 --always-read-main-dll --metrics-shmem-handle=5428,i,3801000813501923552,17699400159594476983,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=16432 /prefetch:1
    3⤵
    PID:1048
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=248 --always-read-main-dll --metrics-shmem-handle=16788,i,11799087079170856438,3766135111867453211,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=16852 /prefetch:1
    3⤵
    PID:5128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=249 --always-read-main-dll --metrics-shmem-handle=16840,i,14826928945610319578,10589541069460139028,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=16960 /prefetch:1
    3⤵
    PID:8020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=250 --always-read-main-dll --metrics-shmem-handle=17128,i,2753152156585648636,15971517050644429171,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=17216 /prefetch:1
    3⤵
    PID:6836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=251 --always-read-main-dll --metrics-shmem-handle=17264,i,17220207662410028494,5051633562812456512,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=17316 /prefetch:1
    3⤵
    PID:9908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=252 --always-read-main-dll --metrics-shmem-handle=17544,i,2301139490338425740,6803917183808896036,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=17632 /prefetch:1
    3⤵
    PID:8120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=253 --always-read-main-dll --metrics-shmem-handle=17552,i,9839386863087221214,2625804742089676505,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=17788 /prefetch:1
    3⤵
    PID:9744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=254 --always-read-main-dll --metrics-shmem-handle=5748,i,15783652640023837904,15575342347944336343,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=7100 /prefetch:1
    3⤵
    PID:1832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=255 --always-read-main-dll --metrics-shmem-handle=6476,i,521229341387722464,8900915843652696317,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=17976 /prefetch:1
    3⤵
    PID:6596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=256 --always-read-main-dll --metrics-shmem-handle=7256,i,17790343231390786014,9122290806158777855,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=9452 /prefetch:1
    3⤵
    PID:3204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=257 --always-read-main-dll --metrics-shmem-handle=18016,i,3781533641320216124,15016242522433678608,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:1
    3⤵
    PID:5316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=258 --always-read-main-dll --metrics-shmem-handle=18076,i,3428028779923307958,2919183561362849636,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=18292 /prefetch:1
    3⤵
    PID:6532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=259 --always-read-main-dll --metrics-shmem-handle=18372,i,14551658888458935631,12993137311431678856,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:1
    3⤵
    PID:6236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=260 --always-read-main-dll --metrics-shmem-handle=9472,i,17151410701322016685,4278517214941152042,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=17948 /prefetch:1
    3⤵
    PID:9420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=261 --always-read-main-dll --metrics-shmem-handle=18660,i,1918968155132460232,10590911041257674516,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=18696 /prefetch:1
    3⤵
    PID:3804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=262 --always-read-main-dll --metrics-shmem-handle=11108,i,14968962581118061676,464334164700091555,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=18608 /prefetch:1
    3⤵
    PID:9148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=263 --always-read-main-dll --metrics-shmem-handle=18828,i,6851593560032179825,12769311130045394570,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=18876 /prefetch:1
    3⤵
    PID:9896
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=264 --always-read-main-dll --metrics-shmem-handle=19060,i,4022175291560498250,9911775328183601826,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=19056 /prefetch:1
    3⤵
    PID:8824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=265 --always-read-main-dll --metrics-shmem-handle=19144,i,15908321890880068526,7917032879396933952,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=19180 /prefetch:1
    3⤵
    PID:4628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=266 --always-read-main-dll --metrics-shmem-handle=19324,i,7570421007911086217,18065463061909783439,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=19296 /prefetch:1
    3⤵
    PID:1372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=267 --always-read-main-dll --metrics-shmem-handle=19472,i,6152865375605219138,3500255502465206095,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=19516 /prefetch:1
    3⤵
    PID:9920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=268 --always-read-main-dll --metrics-shmem-handle=19728,i,7296195102327759785,783901166477016586,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=19788 /prefetch:1
    3⤵
    PID:8156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=269 --always-read-main-dll --metrics-shmem-handle=19784,i,3610992246170070632,5447517918653616589,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=19900 /prefetch:1
    3⤵
    PID:6516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=270 --always-read-main-dll --metrics-shmem-handle=20052,i,14615876310195557357,4243227455147238975,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=20104 /prefetch:1
    3⤵
    PID:3436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=271 --always-read-main-dll --metrics-shmem-handle=20092,i,11657954967760250361,14463934238463043604,2097152 --field-trial-handle=2160,i,7151315724949173032,15615849170481764901,262144 --variations-seed-version --mojo-platform-channel-handle=20028 /prefetch:1
    3⤵
    PID:6372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:10088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:10124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:10152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5348

C:\Users\Admin\AppData\Local\Temp\infaz.exe
C:\Users\Admin\AppData\Local\Temp\infaz.exe
1⤵
- Modifies Windows Defender DisableAntiSpyware settings
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
PID:1912
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c schtasks /create /tn "SystemUpdate" /tr "C:\Users\Admin\AppData\Local\Temp\infaz.exe" /sc onlogon /rl highest /f
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:4192
- - C:\Windows\system32\schtasks.exe
    schtasks /create /tn "SystemUpdate" /tr "C:\Users\Admin\AppData\Local\Temp\infaz.exe" /sc onlogon /rl highest /f
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:2728
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c sc stop WinDefend >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:4404
- - C:\Windows\system32\sc.exe
    sc stop WinDefend
    3⤵
    - Launches sc.exe
    PID:5068
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c sc config WinDefend start= disabled >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:4768
- - C:\Windows\system32\sc.exe
    sc config WinDefend start= disabled
    3⤵
    - Launches sc.exe
    PID:3204
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c takeown /f "C:\ProgramData\Microsoft\Windows Defender" /r /d y >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:2852
- - C:\Windows\system32\takeown.exe
    takeown /f "C:\ProgramData\Microsoft\Windows Defender" /r /d y
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:1344
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c icacls "C:\ProgramData\Microsoft\Windows Defender" /grant administrators:F /t >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:4556
- - C:\Windows\system32\icacls.exe
    icacls "C:\ProgramData\Microsoft\Windows Defender" /grant administrators:F /t
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:5012
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c rd /s /q "C:\ProgramData\Microsoft\Windows Defender" >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:4012
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c takeown /f "C:\Program Files\Windows Defender" /r /d y >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:960
- - C:\Windows\system32\takeown.exe
    takeown /f "C:\Program Files\Windows Defender" /r /d y
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    - Suspicious use of AdjustPrivilegeToken
    PID:3912
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c rd /s /q "C:\Program Files\Windows Defender" >nul 2>&1
  2⤵
  - Drops file in Program Files directory
  - Executes a command shell one-liner
  PID:3260
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled No >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:2100
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:4076
- - C:\Windows\system32\wbadmin.exe
    wbadmin delete catalog -quiet
    3⤵
    - Deletes backup catalog
    PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:10116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:10172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:10000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2712

C:\Windows\system32\wbengine.exe
"C:\Windows\system32\wbengine.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4852

C:\Windows\System32\vdsldr.exe
C:\Windows\System32\vdsldr.exe -Embedding
1⤵
PID:4988

C:\Windows\System32\vds.exe
C:\Windows\System32\vds.exe
1⤵
PID:1556

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4840

C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\servicing\TrustedInstaller.exe
1⤵
PID:3912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

System Services

T1569

Service Execution

T1569.002

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

File and Directory Permissions Modification

T1222

Impair Defenses

T1562

Disable or Modify Tools

T1562.001

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Inhibit System Recovery

T1490

Service Stop

T1489

Replay Monitor

Loading Replay Monitor...

Downloads

8AD687EEF26C5BA42176ECA5E00B1E27

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8AD687EEF26C5BA42176ECA5E00B1E27
Size 309B
SHA256 d3c854693f3cd48b86915e0b44761eaaec3542c878d482f21f07316ba86bcb57
MD5 dceba47d3b386b213f4ceae94969d6eb
SHA1 0b3caa540893c49f47595e2192c8eb1e5ff5a4fb
SHA512 14f90a3cd5e60b1777589c977cea366b1dd7f3e16c58c330064b0fede385e34081361cba149b271a44136e2666b5bf90268e0d544d4da5c9c6a5b79e03fdb06b
TLSH
T153E026E062AC128A19A0E6509990D4CA4FB844E51F1AF0805944CFB24187FCAD44118C
MD5 SHA1 SHA512 TLSH

Submit Download

8B2B9A00839EED1DFDCCC3BFC2F5DF12

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Size 1KB
SHA256 791735e52af30a1c6a750df3837784a34cfe763332e5b45acfd731ddaa159b83
MD5 937eade2963d309f04ad7c807ba17156
SHA1 b183c87c76481b1e153a6bdfdc71945a59542a84
SHA512 5760b7dcfdcb1f5cd481e3d3c183b9c21996542896c602a0bdb665420693d3c67d3cacf98a2e18e437e6f7abf9263e0a18501930e02dabf2d748f749351820c8
TLSH
T1FB31C14EA2103067D946BF72D9CF7E83CDB1324AB7CAC46B18445E4229AAFC25F840C5
MD5 SHA1 SHA512 TLSH

Submit Download

B46811C17859FFB409CF0E904A4AA8F8

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
Size 529B
SHA256 39c727d70b8bdf5fc324233d0823555eb66ce846119609a22d1cebedbc3cf80c
MD5 f0102d5ebee72932834506783a39ffbf
SHA1 d6bf07be7cc02a713e0f8f94c124da8a15a016db
SHA512 621caa36ba48c567a850166b85b65474e96f860eca78fd1d3967e017f89a2c7919c6e6a21fef38136a5ae5ecfaade5b686be7476ba95253bfd023f71c0ce78a5
TLSH
T138F0C90C80182262CC04FF91CFD6AC93EC3A33427AD492031B444A420882F855FC16E9
MD5 SHA1 SHA512 TLSH

Submit Download

8AD687EEF26C5BA42176ECA5E00B1E27

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8AD687EEF26C5BA42176ECA5E00B1E27
Size 192B
SHA256 44be04321577e5e59cff487df88135d006b3f9125a55ec1c8f6d5fbb7c30d478
MD5 b5038d88701cadc3efd6064959798abc
SHA1 33afbb982b08e5e6d75610f437ca7845b5d94d77
SHA512 3a81c40281abc572526b77340d7c0a157b4373b5f6bc8f1224ac0a6e9f42a56e29438176bb4062739e0279dc8b3a162840ad12b0fe57aed30214ce752fced66b
TLSH
T117C08C20362A4116F240033E4DE9D2020AF8E624CB82C32C9B71133816085421830EAA
MD5 SHA1 SHA512 TLSH

Submit Download

8B2B9A00839EED1DFDCCC3BFC2F5DF12

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Size 174B
SHA256 cdf8e22f07ae191df38cfb90ea6123859955b8a985dbfdbc65e1de09aef6037d
MD5 c3600f511328c9c171b6edc0d001ea5d
SHA1 c14651299f8591b5b37894b83cadb2d3d14b9eb2
SHA512 36041f07e8fa3bcac93dfadf0c496537f1307e9e039cc6b2c7fe2b9e4e8447aeac4ce1da9ec523687638204982a46a658e8f52d56476d717db37f38a86b3fb47
TLSH
T171C09B447731021DF475153F155645109BF7E104EE968304DF701116551C94598B7E0A
MD5 SHA1 SHA512 TLSH

Submit Download

8B2B9A00839EED1DFDCCC3BFC2F5DF12

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Size 174B
SHA256 bded9a437dcd6ef2efbe9b8c1739c4d6bb19aafa0047e3839b55edc296d92630
MD5 821978a6d46b1b79cde9bb914666434c
SHA1 2eb310ee7f8d99efc71563607dc7d10b49a72b71
SHA512 edc1a4e42d8a40fac6c79f9ba8969ba7a97d79ae1aed7c63e8d419706f9e972d60e914922010387bca995dfcdbcb3ae80f16ca29f692512306e6657ab019f485
TLSH
T1F5C09B547735021EF465157F155541509BF7D104EE964704DF702126551CD459CB7F05
MD5 SHA1 SHA512 TLSH

Submit Download

B46811C17859FFB409CF0E904A4AA8F8

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
Size 170B
SHA256 67d9eeafe30afaf0b2e45f24c59aa72c9507ac17a70380fc9b9670cf6adcd9e0
MD5 b002678d79e2369c7c0dfa79b9b4d461
SHA1 9b974953b8013329ef62c173dc51b2e5962565d6
SHA512 5d07fb4e607778a6a8ce9aaf4dfe0505a567340b1cdc4b7aff723e8f140f997476ac5c4db5a1b91fa5858b91c483244ecf28064cf108a36b36911ecc30890872
TLSH
T1F6C02B2033228147F092003F08E4030057F2C240F203830002740156421D7910871D41
MD5 SHA1 SHA512 TLSH

Submit Download

08da79a5-fcf8-4a0a-af7a-ebf20acb29f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\08da79a5-fcf8-4a0a-af7a-ebf20acb29f8.tmp
Size 9KB
SHA256 6a0f75abf09b9993c4b37c74e7224e63b2f3fc33e9eafb7019af22d0bd58036d
MD5 dc5c8ba074b495174bb9f27ef2dc3789
SHA1 418ce3a71e57564a4ae58659bced70965f83f935
SHA512 c779b9c75f79388a84bfec839e69db4a52dc8534e22ca6ebfc2ad454461b730cc283386c3456ccd8bec50f4cb4a14c3a4a16b984ec6348b8bd91e2b452e1638a
SSDEEP 192:zOON76JUbM5QmiU1pPDZh//oT5VeqTNofdq/qU9:zOON76+bMXth//oT5VeZfrU9
TLSH
T1992217347879FC775CA3A244F0833BA38FA410BBAA816F94E6D95F1C05C7298274B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37b8bfc6-5dea-441d-9cf5-611a16613481.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\37b8bfc6-5dea-441d-9cf5-611a16613481.tmp
Size 8KB
SHA256 19a8434ac703f645cc9a5f35b9f6b41a0a6f75043b99ca07ce80b020ff35e1f5
MD5 ecd9a4f4799d81575dd0dbb5669a83b6
SHA1 d5f5c7837edcb795256f689ee64c2e1512bb535d
SHA512 34b936d05b9f3dbf3fef9af40cf50b4793caca4ca4bc704aab1f6f54d357cccdc2e18c69ff685b62df16b6e3da1ad0b022b326671f945874c54c98f08d66214b
SSDEEP 96:KqONkFQsjpfbUmjH5ih/cIPURHl8h4otop5caDEBKP4v+Y1xf//ojd2xyY5qsoT7:BONh6JUm0QmiUy9oso//oTpBCfglU6
TLSH
T1C902E835BC78ACBB9EE39E45B0477B239FA4106BA6916F84DAD91E1C01D715C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4008b4fa-b8b2-4e18-9ef0-6ebc9e3ba6c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4008b4fa-b8b2-4e18-9ef0-6ebc9e3ba6c2.tmp
Size 21KB
SHA256 f82d4f0f254296c3d003365a8e96c51c74fe56d4ecdaeeb5ceba995affc46e0d
MD5 9b797b761224ba070f7de5d5464ba9e4
SHA1 7a84550b692ebafe010068ba8914effb9ac4489c
SHA512 26855d37ffd6544755327abc6f058eae8ba16fd45929ab9b56e8e82dd139907065e16a2df2a3ed41a85450412cedbaa22dbe660c5b13ece004a4a8053508e952
SSDEEP 384:nBQkUSvUDtsN7ijbJqft+MMJfdw0tp//oT5VeAfrH7vBEDt2IIlp:zEI0MMXrtp/AT/NfrH75EZ2Lr
TLSH
T1B8A25B74E8A6AD379DA79380F2473AD3DFB050A799C50F84D9CE9A1C05C369D2B0BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6aa6db48-5242-4292-ba92-e65f1f901f9e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6aa6db48-5242-4292-ba92-e65f1f901f9e.tmp
Size 8KB
SHA256 a9113586b13d2df2c3621c3b706c4f46676cf1749fb7493c5de82beb8bde2446
MD5 ae810eb375df5c981af3a12cf6791271
SHA1 4bc0c098651df66735b6ab5eb7861d35f0fc87af
SHA512 6c46a2c81ad4e67cafe418694be586a1d783b15a792e69d98f691cfaa9865300f96f43f2e3417143178a276cff6edd438db52811a2c92b8fa846c1100490170d
SSDEEP 192:EON26JUCQmiUyMo8o//oT5VeqTNxfdq/qU6:EON26++E8o//oT5VeUfrU6
TLSH
T1BD121734B879FC675D93A544F08336639FA410BBEE819F94E6D95F2C05C62982B4BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6de39a33-7c2c-43cb-b2e2-2eccef052f1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6de39a33-7c2c-43cb-b2e2-2eccef052f1e.tmp
Size 12KB
SHA256 bc2fc0f16855be25e6ead61a075a9ceb13a04d98c4c056942e38bc785362cf9d
MD5 18c150ef3742590f10c53d9eca0df74e
SHA1 1fbfe6e8fd345fefdcc17667447b542a0efa9d0c
SHA512 1a3a14363f4b410e246b5a7603ff7ddb5cef58e01dfbfd009c9427859d5ff0c59bfabb2c82b379dc7f3bf5d4963c474467eacfe54c35fcd2c381397aca0afdbf
SSDEEP 192:zOsN75QiITUbMjQmiU1iP98Uh//oT5VeqGNofdq/qOB1F:zOsN75jb0c9Hh//oT5Ve8frOHF
TLSH
T137424975B8B6EC775DABA249F0473B538E7820BB9AC05F94E6CE5B0D05C22982707D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

79da6094-d340-4d6e-91a2-6f8cd56b6607.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\79da6094-d340-4d6e-91a2-6f8cd56b6607.tmp
Size 12KB
SHA256 c535877889d0b31ab9034ec8e73c89484628fefd77cbf36df46ea47c26d189ab
MD5 059667415a4631d0488c5ab03d08d04e
SHA1 156de0bea45d85475ca6cde0c673584c1d667193
SHA512 40919b53ed435866090e768d200a3b1aac18ba800de243f8fb9143e7927bf4962b026054126a6c440bb01f1b1e4af9bbe4a9e714629a2f9ddb90245432242ef2
SSDEEP 192:uucWsN7ZQiITUbM8QmiU10PBah//oT5Veqxaofdq/qOB1D:nnsN7ZjbJ64h//oT5VeQfrOHD
TLSH
T1A342597578BAEC7758A7A249F0473A538FB420BB9AC00F94E6DE5B0D05C62982707D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

801e5fcd-f8ba-41c4-bc68-99985ee171c3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\801e5fcd-f8ba-41c4-bc68-99985ee171c3.tmp
Size 12KB
SHA256 aab1384854a29cbd91a2213ef38420e7ab492b7ac1e175ba19fb6e6ea64a7b4c
MD5 85a0043f2d83c8ea413e6f253af03030
SHA1 44b6af63840b16e788e05e77df31b38dbe8232ce
SHA512 1dff783e42bb3f36e06d28815f6952006945125005689ef660b737817661b3d0cbf5368bfaafc74dac6e6323d0826c64222e7c254686e23f4c65931ec39d9953
SSDEEP 192:uugWsN7WQiITUbM8QmiU19PWBh//oT5Veqxaofdq/qOB1D:n7sN7WjbJHSh//oT5VeQfrOHD
TLSH
T1A5525A75687AEC775DABA245F0473A53CFB420BB9AC01F94E6DE9B0D05C2298170BE03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8abce482-bf5b-48be-a1be-f2b7858fe065.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8abce482-bf5b-48be-a1be-f2b7858fe065.tmp
Size 12KB
SHA256 d0a6b0fb331cb022fa1ce4bfba49546cca209a198378307fdef85bf908e3c163
MD5 369b15b5e05880bbdede73d2ad570bc6
SHA1 94f760ae53c468265cba0aa2f573cf154b5b63eb
SHA512 b01f3599bf859c4ff05202e3081aac73d4ae0ebf48c7e2c447fab8df1516475788890db9b0ec0dffe3881e7badcb8d5f6a77daf281d6960ad9151c529fc0dc55
SSDEEP 192:zcssN7ZQiITUbMjQmiU12PYyh//oT5VeqGNofdq/qOB1D:zfsN7Zjb0g5h//oT5Ve8frOHD
TLSH
T15C4249757CBAEC775CABA249F0473A538F7820BB9AC41F94E6DE5B0D05C22982707D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8cdc3be2-d2f6-47a0-9557-ee950efd6413.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8cdc3be2-d2f6-47a0-9557-ee950efd6413.tmp
Size 12KB
SHA256 064d5b7929d982adf4880fed29b8ec0109b51f3affa54995f7c64653f84a0985
MD5 a70530b61b841748f38b59803f471ee2
SHA1 f783ee547963d680b338ff5570ec1bd236de831e
SHA512 07f63b06188cfb633dcbfc7b091812187b61f95464db88a1b4879f0b09bca2e0bd55c1c3a4aae59114b3bb185ffd670d5dc3d131e26246863637b41a441146fe
SSDEEP 192:zOsN7fQiITUbMjQmiU1PPx/h//oT5VeqGNofdq/qOB1k:zOsN7fjb0FJh//oT5Ve8frOHk
TLSH
T19F424975B8BAEC7759A7A249F0473B538F7820BB9AC00F94E6DE5B0D05C22981707D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be1229de-185d-4a22-acba-7ab22fd2da69.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\be1229de-185d-4a22-acba-7ab22fd2da69.tmp
Size 105KB
SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
MD5 a1423f7d471bb13fff5ecfcdaea6454c
SHA1 7ded49e29e2ee4ecada313702dc82cddf87e8600
SHA512 6e90c834830dc60cf4e69d47a842a672355eeac4f32e8a0122d66df5ce75da4ac71274dc3cb208dbb06f3cd4f506485158442b7832ede2cf24ef8c5b26c1705b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T119B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
Size 310B
SHA256 7a614c3eb996f0efd174909bec4f3f3ef8d177b8da770fb2219df2ceb38821a1
MD5 8e4a583ea507b250c2b5157f2f53635c
SHA1 e8eabd15bb8306342be1d7347fdf009e5b82da14
SHA512 6d0f29f22d172e46130797a687738e8aeb96876045ee90b1a83cefe1bfe9e36c43c244a2cee55030d78f62210f3561807fd51913f2d70992962b821a437c747d
TLSH
T1C2E02E42F2BB28C9CCE34AB7A1E222A32218CB007A1F628146030E4ACC872E4C870024
MD5 SHA1 SHA512 TLSH

Submit Download

metadata

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
Size 604B
SHA256 2b1e4d53e7747c0761f41bdfaa8a91bb26dbb8c623fd9637b344a5053f71ee5a
MD5 1d4e214c56b867a5a8cc6406000f11dc
SHA1 45449fe2eb5e06ba5b3c240af2d79ffbdd9e314e
SHA512 45ef27485dcc94d5ede682fb658e69c7f3d8eb50a26b5e12a06a91785dd9556cd2ca11fce08d5a86421233ad2d4d22af04ed888eabb5e2f81b828df419a06922
TLSH
T133F059A3F3BF31D6CCE7067F91C256A32621C301720B92511A670AC5CC073F68860870
MD5 SHA1 SHA512 TLSH

Submit Download

metadata

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
Size 1KB
SHA256 bbe347a3229ba8fef0272810e297f97df3bec5e6721950a5d3972cc9b9d82a36
MD5 f7a3828a02ee20371c96fcdf721a55c2
SHA1 ac7fed63b73af70a88bd0428696038ac22aed8fa
SHA512 ece6f4db36f718ea72c0c96b77d0e2c8db3fbf0060f0c5b27a7ed080a2356a26c609a96a736fd1807fd4bd7134cc4900d96e32e3f081e0b4533c74c4da5558ae
TLSH
T120117AABF3BF31D6CDDB477B41D21BB32625D20576174222152346D6CC032A68D60C38
MD5 SHA1 SHA512 TLSH

Submit Download

metadata

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
Size 1KB
SHA256 78d4cf469bdf9a80614a8ed2884f94d2d563d7de3dc9448e0d4b5c49c25010e3
MD5 3dea69909988b56cbf2774c871f1eb6c
SHA1 177195b64e0d335fa1b08fde10d9bf5297123ba8
SHA512 d54cbb3ecf201b89abd02bf808a42eedbe9b81e8e98992da1f3ea59b93177b8d84d7d203130af34a6923f80702ce78e6cda3fdbc5e58061f93d2596deb8dbbec
TLSH
T12F2176ABF3BF31D6DDD797B781D21F732635C21672178222691386C19D433A68D60828
MD5 SHA1 SHA512 TLSH

Submit Download

metadata

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
Size 1KB
SHA256 78691278f1df64af1fb0585e0eb09eb61d45e707928700b1224b7ae1b69ac044
MD5 815c0030debd38c9b34151c1a9755f75
SHA1 5ad1dc8c741d626696ccdf7cff770472218add69
SHA512 30d627da80f8df0445e022f4f2f1f4f4ee991c4aea15d66e3fd478806eb1d84f9a15b9cdb968b9322ed888450769aecdb31a6043f43a7bc9a65c1fbdf595b490
TLSH
T1E631776BF3BF35D6DDD753B781D21F732236C21576178222591386C19D033A68D60828
MD5 SHA1 SHA512 TLSH

Submit Download

metadata

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
Size 1KB
SHA256 7afec035ef7f891a1521d77f52816b32126333467c7843324dadb098a13e6781
MD5 c30ab0b215a2d6e753d18a4409961a0c
SHA1 fcea559dfb85abd33e8f10ba72547f2b7f86131b
SHA512 2164d8d4492d59b105d8359d590526b3d271c64ecc683e548db1d68b46762f073cbcd4930228962316a33f049d3f497f217b4af583e433c236924292d82c03f0
TLSH
T15631866BF3BF35D6DDD793B781D21F732636C21576179622591346C18C033A28D50828
MD5 SHA1 SHA512 TLSH

Submit Download

metadata

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\metadata
Size 1KB
SHA256 91fda729506769753c127085fc354e6dcce20524f6acab89ea7f88dbfab80aaa
MD5 9ab4aa0217739fb808f9823d0fdd6f64
SHA1 c66cae53a24408982956d4a2fbe7bec553347a4e
SHA512 90b50e5b3e56a27f4061142f258affff9da06d8c007fad2f89d9dd401a1546031efdb7c9c45c6b75ee2f94474538eb8d96546341b6535d2dab4d34d9955a9979
TLSH
T14931736BF3BF35D7DDD793BB81D20F732236C6157617A622541346818D433A28E60828
MD5 SHA1 SHA512 TLSH

Submit Download

0f7d3038-7fa4-4aee-b8ea-a0047be16571.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\0f7d3038-7fa4-4aee-b8ea-a0047be16571.dmp
Size 418KB
SHA256 19ad0a279b826d02264aee67a4f64d2c217cf0d5eee642ce587219a120640428
MD5 54e3ddbd49200ae16ac40018b727aaa2
SHA1 ae416e152fefd1f0e163c3d9220ce4b2a240a4ec
SHA512 032c7e87d4eaa476f47d5d0ff1a21926452f181dbf3b98c7bc4a2c10350e1699f7fd5675ac3cedbddde7b4950f302dc952c61d72a3bf6581c47e6d2b3c3a66cd
SSDEEP 1536:eXSlJVxsWgI4g20kckce7rzksferthY4h8sNJF13SOUYHukf7TmYSSRRgH8Z/Ch:hJVxt4Per84qvquk9PgH4/W
TLSH
T10894CD97A795856FF42986B48AD36B40FBF3D81C6BF243525260233D2CF73847B25A60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

279dfc1e-e402-4967-84c6-13466e569a61.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\279dfc1e-e402-4967-84c6-13466e569a61.dmp
Size 346KB
SHA256 71577f959d35d99c823065e8ea3c8491a5754adc6a898683c7a61243fdaacda0
MD5 e19514fe79b9168566818e30495dc926
SHA1 2ecd332695de7a0e6cb11792d9b70dea813a63a7
SHA512 8a61815d0305cfddd162c8e5dc3cf69cb4325a1fa8db16b2e6398a0027c8b97fa1f95ea11af354774b77dcb01282a4dba9bf98fddf5712add4e332b4ac15f558
SSDEEP 1536:WiRLQ3OUcICoTpWLS4eqkdr0womWrrlQJKnqV3x019Mgr0mxAFEhnvqOYhnZ/Cjn:WUZQ8nqV3x01j0Z/UES
TLSH
T16074972BBB95AD6FF43C4270D8E6A790F7F3E8346F524396121022392C773A45B35A49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ae1cdc6-6a2d-4db3-8c54-eedba286d61e.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\2ae1cdc6-6a2d-4db3-8c54-eedba286d61e.dmp
Size 318KB
SHA256 4bb4ced79b06111b9a31f0bd524fbec98851ea06371eb8a7f7b0ba9e438fbc11
MD5 6d7ad4e92db7b608b9d9968a13969793
SHA1 e8fd81427cdfac48d50785c6ed1d6fedb9c3234c
SHA512 21f1afa2ac42a102336a37fd10f8896628bfb32510ba52adc11386e517df3366b74277137cda516b84b0608e841d07295834a4b03f72a0b21b831a19e25ad070
SSDEEP 1536:LG7KwWkF42/3aWhaSn/C9q8VrvYEckv6rbsir+ARrjrt5:fq07S/QTrvYEckirb1NV3
TLSH
T11E64C932D3919936F61846B46CE32B49F7F3F8046B4B43761610E1A92F6B38D7B35A06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f3f49c5-0667-418f-9951-500f9d1e54c0.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\4f3f49c5-0667-418f-9951-500f9d1e54c0.dmp
Size 653KB
SHA256 11f3d424d614c430bea653aff579f171efd32f4230143ffecc59ac4e3f6c81c3
MD5 4884c27abbe8769b976c6057ac5f2b3a
SHA1 dd634c2dbff87cc912b3fa71725f879d8e73e7f5
SHA512 e30870254b8559ee7bc76d59d848c26c9c175215a83f6dab99db847144161e2ffae0600a8ef356f5a877a041491fa67611b068d2f30431d7bc41438235aded81
SSDEEP 6144:6+NMG/79xNMn9KN1sKztB9ZhaPvkbYKXVA0C5/H:6IogsH5/H
TLSH
T1CFE4AD2BEB868857F53842B058DA9770F7F7FA6C4B6203265254262DFC773B43B25980
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50bd9248-f95e-4f67-9b41-b5b80a99415b.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\50bd9248-f95e-4f67-9b41-b5b80a99415b.dmp
Size 323KB
SHA256 13894e622504d51177075d9f1b78ef0f226c787a00cf73ce53b3c6bf569c50a2
MD5 6c79db55ad85681fef3d1251b5768fa2
SHA1 0d8183f06fb24c3ddeaed038896a99162bb9d7d9
SHA512 73adfb9c16e805527e551a25dd68b0503f66e35afe211fd720edc258a7768902451480f540ba0f70880fbe943e1a03d10ed713a2be30a358e82522adb2fcc4d0
SSDEEP 3072:x1r/tsIsVKydy7s92PkzAbtLQiEYA6ngi/xbWpZ4asnW:x1ruKys7s4PkzKtLQiEcH/xbWpZ4lW
TLSH
T12164EC53A789496EF05F427C68E36B91FBF7E8A46BD2435B072022BD2C673D41B75A00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52e3e733-939b-409e-942f-70facd426c52.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\52e3e733-939b-409e-942f-70facd426c52.dmp
Size 322KB
SHA256 cbaf9e84012212465245acfda34d639f8b9af3ab08e8926e557eb4e1b084878a
MD5 af26f7a124eb366accd673eb7fef87a8
SHA1 b1d06ee607f7621228e63a61c11bfda3b1ddd7b6
SHA512 b6eaac15dc8a2d122b56b81452906bb94f986e3ce5b9e80e081b9a74aa7c0202aaac31956380c45da6993f126df1d82c9f137bd33c8880266b759cb6973dd9f9
SSDEEP 3072:xHNAsCbfoZbP3b4Zy6/Rkm1yi7/r5k8u/NlV:ksCbfoZb/6/Rkm1yi7/r5k8s
TLSH
T14D64DA17A7874826F49C4A798DE75B95F7F3E8189B42A397421122BD3CB73D06B39B00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e990249-a1e2-48a1-bf4b-48ebd369942d.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\6e990249-a1e2-48a1-bf4b-48ebd369942d.dmp
Size 438KB
SHA256 e99542481b80f588a51954c4ef9935d55c243789972d4eeae25de8e1dc5ebf96
MD5 aa7f6726193da2280b5e4ad1c26d85a6
SHA1 8850bb66efd91b5e4048f0bd0359c2d20a0b95c9
SHA512 c4efdf5a825df76a23c95e546876638addeca3509e876c92ad499fcffd5571d27375415cd1e5fbb1ed27056068f17b45806b7b6ba7a7f9c51611d2012438369c
SSDEEP 1536:sxFH78G3F7kg/9FWb4gMid32sWPkPyKD8/CMwCA6+Cfh:Cklk0Bsh
TLSH
T17BA4C907E785996AF0284270C9E2EF51F7E3EA296B7247569610222E1CF33ED5F31E50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

812b0412-116e-44dc-b933-a6bd72a37955.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\812b0412-116e-44dc-b933-a6bd72a37955.dmp
Size 390KB
SHA256 c5f8e9513b554a5512e02f01f871c8c60336d791d57e3068bbd915fd95170464
MD5 1689378994c1b7497d86f5586e189733
SHA1 a2171a3e43e184e9723f6faf39b1c11969883dce
SHA512 2277e738e7bf1dd60b15ca67aaae67ddfc95badd11e3ffba0428fd9bbf83623eb7d29b6fdd555f7aadf0fe6e3fe7fcecfe2246a9214050d0998203979eeffbdd
SSDEEP 1536:MVZDrzs+Wf4RpRtcOFZp2Lp/kslUmy+ui6MnysxzLQVeIE/b4em3sAG4h1pG/C0R:+alUsVpIE/gG/N
TLSH
T17184A653A785C86AF01F43748CF66790F7EBEB195B2343EB5211A6291DB7380DB35A80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

888239bd-eb1b-440a-9a89-b8372edb80bc.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\888239bd-eb1b-440a-9a89-b8372edb80bc.dmp
Size 309KB
SHA256 fcd3832ff52e5dc75d4857ff483504b3dfa28c926bd6f48405360bbc7d949f77
MD5 1414722261d546e518854c5358754d8c
SHA1 92350604db2bb04118bed8c8869dc907eeb05117
SHA512 8361a4ade6cf4e3a989f825e2bb6028c9f7bed87f3a986715c6c3f014cba4c3a4e60f09907b644bcec9cad1a5a90f99f26a29016ec3458dbff2ce1af8ddb9d7e
SSDEEP 1536:9ZywtQx2Wq6U9HSmiQN/85nD9mrZYXDETqljFkrQ9jSypcH:9n8D9mCXDETqljFke1i
TLSH
T19764DE97E7859866F01C46740AE75B60F7F7E8196BE283571360227F2C673F44B36A02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d03e2ab-22d3-4cba-9af5-b3fa2e5282c4.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\9d03e2ab-22d3-4cba-9af5-b3fa2e5282c4.dmp
Size 314KB
SHA256 ccfd42a2cd53191fe8b0fa4bbf42dfb64f93803467e7a5e7cd7f952062f3cf8b
MD5 c661bf74e85bd4b079327f54b8822a89
SHA1 b1a1bf82c60c351dccf6a76e1acea19d0a557adc
SHA512 f76799876e5f523a23fddd253cfc04bbf63bd8de54ec579f4ad8dca973e53a0493c781a323def4917fcb7ce9c735107e75e8d6ea9a595624c1eff6a523631a68
SSDEEP 1536:2mLi1Yg3AihPWq6BSsaRM8uZoC4gDJmFIaGTm6CRG93pvJ1LU0yYcI:ZvehsNZB4gDJmFIaGnjLUuB
TLSH
T1B564C827AB9DA47AF019427469D27B92FBF3E8542BD3C742231123B97C273885B35B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d26c3f5-3237-4ba5-938d-dc91167dc2da.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\9d26c3f5-3237-4ba5-938d-dc91167dc2da.dmp
Size 596KB
SHA256 579d9db82550bdd27b0f327e7055a7429d288c8bfe33276e45e80904e7d26375
MD5 ee8812ed622ea60e584114e4155baeaf
SHA1 a22be80355acc86b94f47e4783fb2782a8681a20
SHA512 cd3c1109978bf1c89a95cfb2815f8cf9573ca696212b7764b83d5399232e9a0e46077943733fed8a747ed8b354d0e958b5da8d70b1fa9e817152854e00243f10
SSDEEP 1536:iExC6GM3hqEkKF9NJsa2zqtqZzNqaFoC5FO5Co+Gj5jJNtt188gQa1LZ4+s7YfI6:bWHXO5CZGjx18QgLZ4+s7cbCytssag
TLSH
T1E5D4BE12D7C14D6BFA098631BEE76F90F7F3E4A89F924717126422792C273C55B2290E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a6ff4854-ef90-4e4a-a603-70ac8789b9d4.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\a6ff4854-ef90-4e4a-a603-70ac8789b9d4.dmp
Size 609KB
SHA256 48c66667417342afcd11c760f73eb7b2522e2c0eba1fcce0f9bbda05ca32e963
MD5 c6a615cb1643190a63743286754bfb12
SHA1 813014ff2773cf917fafab8be5cbf4c8653bb4e7
SHA512 d43cab4f257036d1d32ee983d3965a41ca11b69a6facf229410976b2f88b1bf2b54aa218e8d20695ed4559630e039931868c08f1bb2250710c5551dce23a3127
SSDEEP 1536:i/QsdwN+7V9cP2V7ic1kwxWX4mUzOq3tYSSJrrXNEazHdq9ui2ixpx/iqy3G1lgI:oRaPkV5OWYVSaHdq9OXYr+ZcMZVuwVo
TLSH
T176D47A26BB459577F06C43B448B36744FFF3E425AB62432262527A392C67FE02F29E50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae9fd40c-4875-465f-99c7-0cf29c6026a6.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\ae9fd40c-4875-465f-99c7-0cf29c6026a6.dmp
Size 402KB
SHA256 080c3804aa492149879b6768bad1b42e232aa723338962acb0af0f1006962a49
MD5 c9ef90fdc2763181be236625eaad987b
SHA1 eb74b3690caef30172eb18dd688f0391105f2368
SHA512 f21a55a5a86104a0b223c7628857a50dc6b5cc68d575f92c8e5d9358f6e0c557970e2c1478d8990345b7a21395c505572745fc54f3c2317706d81b1ecc7f1a3b
SSDEEP 1536:4z55x8OrTWU4RtMXTPr9wkkoCfrjXXUSsyC/Kt3/Cbo:ax8CSjfvE9s3/7
TLSH
T16094EB5BA785B977F61842B5CCD29741F7F7E824EB824313462066792DB33A48F2390E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bdb18860-0b49-4c59-b927-edda2acff11e.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\bdb18860-0b49-4c59-b927-edda2acff11e.dmp
Size 314KB
SHA256 9a51881ada02785b3339f868970d1370744896b421cb64a4864b234d0e1638aa
MD5 74da1ce145212188c7c0549749dbc9ac
SHA1 e43ced5c5ba4b220df775d8d9c025a2a5eb662d1
SHA512 7961a9f0287cf23da2681fb440dadb062e9cee022b1159d0bf039da59faf36f309425505adbfde23ee6e76d41920f847ff73e66ab176cb641ccee4cd9df3379b
SSDEEP 1536:exRr3QO3JCP7QWq6C4be4/Mi/DaveQgrF1xK1vAoMXZp2EDNfLcR7cK:gr37wletQave/DxK1vAoMXjND9LcBH
TLSH
T14964E053B7C988A7F2585B782CD33750FBFBECD52B526392225122B96D333A50B74902
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c5badc4c-a176-4b93-a6b4-86949dcad2dd.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\c5badc4c-a176-4b93-a6b4-86949dcad2dd.dmp
Size 521KB
SHA256 2faf455646a7466867d73cd615231cc037f0b172a872581389841f8ecdf7b690
MD5 ddffa8ddd4622ada32d53779f9b2b516
SHA1 eb95ad680b6d75bdc520de233635ff29b933e4ea
SHA512 f2e97f72a1ee17eba3132870805120bea12cd86f3b98317b28c0b68c6315b2053892101424c7a89af557a93f578113dbfca959ad5456ce1696a637b5bcd9bbb8
SSDEEP 3072:XkHp06En31vZSHtzKQb0Gr4yp3VGySsv//Yp:UJ06E31vZSHRKE0GrZlGPT
TLSH
T16DB4CA17E74698AEF84C43708DEE5F54F7F3F4146B2647521361D26D1EBB390AB20A82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c7d963bb-f5f4-4fec-af9e-534139a1f293.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\c7d963bb-f5f4-4fec-af9e-534139a1f293.dmp
Size 433KB
SHA256 f1691b63816c24ea10983317eec3febad0a17268cc7a92a84970e44208b6a87d
MD5 9a172cc6c22f03a7bea63b27eb755048
SHA1 020ca114a72976e6e8803a6f8eaca1e9418b7e6a
SHA512 42ba8acdc9cee513473d3cb30354cdb70c0f7485a1221acf8f5781cd00fee991b378a287a01e5f8cb1265a2fc9df8d1c434a1db94b4e060e3b6bfd2895e942dc
SSDEEP 1536:0elDe8WtlvWRQ4L2AewVG5uhZq+C8BoEvvXmH+Qx5wkSFvZ6r9g6fQmlo7xu2/ya:7DsiMb8qeCT8u2ji/Ac7h2ff/dWLA
TLSH
T15894C957AB85C976F02843744EB6E792F7F3E45C7B22430622D0EA292D2F3C95F25918
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c9fc819a-c874-49a5-9e50-612ae2fc1320.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\c9fc819a-c874-49a5-9e50-612ae2fc1320.dmp
Size 335KB
SHA256 b610ec47f854a06bd56a8ed444b9b47001f81ec2b124523ac1d1166472b960b3
MD5 81600b9c4db94c000f434c06811d6b82
SHA1 a983dd83a451a04215ff19b8d584492b76244194
SHA512 9969f3ddf8af1678e96b731237df2faaaf7331d4e9b3eaaa699012d1082eb2376063586df54ff879a258d55b2024e3100ff067195b3f7fe12efbb2c52d96bafd
SSDEEP 1536:YG1uj3qAXFVWq6DG48DQFekH2FRGEbLtmKJtQw3oq1HBT8cS:QXFVQFekH2F7dxSP
TLSH
T1D474A7EBA7AD4DAAF41866B44CE2AF50FFF3F8546BD28756129163792C733D04B24900
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec21c3b3b210ad59e2b5b7e573ee9ee65f8619d137d5a28f49abb9b67ffffbaf
MD5 d52777c8918182d4a3b60fe17691c597
SHA1 ca1cc4eebfbc37da4f1ec263f820f27b5aee5b2b
SHA512 e8124026dc835e86e05fa0ebf30689eb5dfc47133d5949970d2c5dd86980d220b2fdb253a4c0713a695a7ba3092d259ea46a1340cecf5e1e6b3e41c0d4f831f5
TLSH
T1C6D02B22A33639CAD228103702A00351181801D311655100591054084FF8046C482CC0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 67ba45e18cf98eacae2b2e324f6f426e72fa05e2a778f8bd7910e652c6e14def
MD5 68803c0fcf0510c9fc57a6c67ee7f40c
SHA1 31d46274f39cc8a536dfe52c70e5d6b310bed61c
SHA512 47790496de203e745ea9d11fe250a878acd97e89e22e0520f454e777df6206921e0f37bba40dc22a1e2064abcc96b8c0a91b1143c0113d36ae2335f7af484508
TLSH
T1A9D0C032733B3DEEC32F20330190878018048AA3502000100E130C0C07E804798C1DD8
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a4ad79240e4b8ae9fa7aaac2b58f29b8eb9210c7049af7671d6be97d9067b0bd
MD5 210088c86e90634eec5ce2611b13e408
SHA1 fc7c39684981a2343b35675c92b188da25aff772
SHA512 fb816f834df33e847f4fd87ab311d05529646538480fe8614e4f5a6819bb688cf7743dc91219fe29a95ac261d5758db0e8730495669f3ea1eb2180b7e72bc381
TLSH
T14ED0C022723B3DDEC32F203301908B9018048AA3502000200E030C0C07EC04798C2DDC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

watson_metadata

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
Size 1KB
SHA256 e75717405ce9a35a0d58c8c792ebc33ad887585727ea81efc9d3622588311343
MD5 b17fe64b6c0696dba8320d88de29a921
SHA1 e396934e293a07949a4ecd5fad495b8bc106adff
SHA512 a46f6809bd17ab8c2ce1d99887b4e14fd739ed3c62d4cc19435a586f2b8fc3436712fb7164fdcadb7d184d0fbc9c8cb51c366c2288182eb442f50e832fcf6f08
TLSH
T1424144E8BBB06D6BD8831533F051B4090ABEEE571DEB470EF008D1555E6A40B46A3374
MD5 SHA1 SHA512 TLSH

Submit Download

watson_metadata

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
Size 4KB
SHA256 3a4339a51be51217dc98d7b170c62b0a5ef49ab924c81994c4fac16576109b63
MD5 d96230667e64734eb47168be91b1ad27
SHA1 22c478284a00a9a4a66cb95e3af697c89dfec62f
SHA512 51760d52201d24f44413b1ee3ef68652c5ba221afd6863970c592e30ffaf6e30f8d5a1d3a76c00dd035032cb8775a68300625dadb54081c017c15dc420233567
SSDEEP 48:OzvRF65kObISHuQk2QPGJ8TMHGJ8TMhGJ8TMDGJ8TOUiPINGJ8TIioFEg8TMDkx4:G65Cg42nWTxWTHWTpWTIDWTFbTviSI
TLSH
T12FA177F4BA707E7BE44B1672F045E40949BEEE635DEA0718F44C97581E6600B961337C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

watson_metadata

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\watson_metadata
Size 12KB
SHA256 d5ac67b6db02f9156ea7e72698ab6c827506eca8fe1f39f8644cb22bc8af7ccb
MD5 b29335d00801338c8d984c9c0fb879e3
SHA1 b5279dc7cf04f5682f9cf4a28b307b41183857f8
SHA512 fd72c65bf8a2f3af28636c8a2f1cb5a5ff333040792c4be08111d73618963d83b1d5d29f1d57ae1a36eb3ab64ea300d3f7066b37c54e88f11b4b93c4adc72208
SSDEEP 192:V6cg42hH2TkT2T8TfTFT8TtITa3/TNTGT5jTTTkHTF7TN:642p8y8qrZqtOabhM5H3kzFfN
TLSH
T1E04278F46A10B97BE44F17B1F044E54985BEFE7255BA0758B808AB981EE6007E63337C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

073a5870-e302-4e22-a157-375f8b51aa72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\073a5870-e302-4e22-a157-375f8b51aa72.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3afeb2bd-7df5-43a6-a512-eed1be89af3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3afeb2bd-7df5-43a6-a512-eed1be89af3a.tmp
Size 10KB
SHA256 3f51dae0381215be40e68c25f925d7ce5cfc11cb9e05a8b3e6144d01be696b1d
MD5 16826163f4357da56adb9b1aae8e01b3
SHA1 d1e1e188eb2304d3f713bc71589cb7fabb94e75b
SHA512 e9ef36b1431c3468d0bd157203cecd5decba15833c845f216a202fc867b27e6a0d3fb14c329ec7ef73cb35c54dead7de294e13271441f3b827a85a693480e61c
SSDEEP 192:sxZFRzWx/flsR1EdpAK34HW6+WNnP/hYMO6/ahIg5BJ:sxZFox/flsReOHbXhLW5
TLSH
T17622D9626E38697B4CC7E219BB25BF57D6FA503260D11E58E6FC861C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5aab9f65-c9b9-4b50-b3aa-74ec8fcb63d5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5aab9f65-c9b9-4b50-b3aa-74ec8fcb63d5.tmp
Size 12KB
SHA256 aee18df0e4e8f7a3ea2e0fea341fd68d8589732df63b650bb15df8c251a9c9af
MD5 d1212a52041e73f3f30f98554b41e9c8
SHA1 84786422e77a6ae4c5334e700b0fdbe9db8f6811
SHA512 8d01632e24304116c6e82476961dd3725990205b00c946dbacc0e669fafec219cb08fe81a347337eea4e47ce9bd2238a1ebf258e8540f61d0d38d877b9f7ed23
SSDEEP 192:sxZFRzWx/flsFzIdpi8TcgHW6+WN+sbphBae2G8MO6Q/phIg53J:sxZFox/flsFs/HbphJ+z
TLSH
T15542C863AD34597B8CD7D219BB24BF56E6FA503690D01E84BAFCC91C05E6EDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

65b49b32-dba3-428d-b4da-52eca6211a89.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\65b49b32-dba3-428d-b4da-52eca6211a89.tmp
Size 11KB
SHA256 cb5b9b05cccd6eadb8d8e1f39df531e17c54e807686411ac3c2896b7d7b2ad99
MD5 e37965cb4f8df2f68ff38ad51f528081
SHA1 4389505ad00fef99f2d9a989430b8ceea1d3102b
SHA512 b83b17e192a4701782de1ac3afca2632b1d0c76c3601724661aaf00b19859e510232a2456a139b418b8e2ca3395f8186cbbb5a597625d73ef62468a32428dfd6
SSDEEP 192:sxZFRzWx/flsFBIdpi8TcgHW6+WN+sbphBae2G8MO6Q/chIg53J:sxZFox/flsFq/HbphJ5z
TLSH
T12242C763AD34597B8CD7D219BB24BF56E6FA503690D01E84BAFCC91C04E6EDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

779f8823-8793-43ad-a150-ef21bada9a9d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\779f8823-8793-43ad-a150-ef21bada9a9d.tmp
Size 11KB
SHA256 7093df0f2559eedf9767aacdb1cb23ffeea1954d84934c62b0c0d804c939dc13
MD5 7ea2ae95732932dc9c633df89bb01f42
SHA1 f57acc8bb506948d4d94a4e247985da86f28bd39
SHA512 8167719128f22f4944c7072b4f4d2b36c5664bee2c8286932a1e18a4d49a604fd3985d67db3081658236bbcf111eb8cd246b5cfa5860ad0a4d009929e225f76a
SSDEEP 192:sxZFRzWx/flsFSIdpi8ODZHW6+WNSLYByAhBae2G8MO6x/chIg53J:sxZFox/flsFbiHbthJaz
TLSH
T1CF42B8636D34597B4CD7D219BB25BF56E2FA5031A0D01E98BAFCC91C05E6EDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

81a91f5c-f8dc-4c94-9405-5b48a250d115.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\81a91f5c-f8dc-4c94-9405-5b48a250d115.tmp
Size 11KB
SHA256 d6a8773244aa30e1dfc37819c1a02e17a70e8ac24965dbd7a7835d5a1cd79565
MD5 fdf2d440f6c62671d04687cab4e9907b
SHA1 d27bc0843468a11e82dfabaffc6cba62bd49c10a
SHA512 b67b9f469f6d60cf1f90d7271bd34d50011a674ae9e35777f50664ee879b62f04668733ece3080061734d9f18fef5a5a73cf14cf5ead500dfc05d43e928270eb
SSDEEP 192:sxZFRzWx/flsFBIdpi88bfHW6+WNSLYB74hBae2G8MO6h/chIg53J:sxZFox/flsFqCHbshJqz
TLSH
T10142B7636D34597B4CD7D219BA25BF57E2FA503290D01E88BAFCCA1C05E6EDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8889e3ed-30ca-421f-97f5-9a2d13c259be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8889e3ed-30ca-421f-97f5-9a2d13c259be.tmp
Size 27KB
SHA256 61905d34ae27c222fe5ca7b0b5880a34e7a3ca821f18e76a693efce53cf7da72
MD5 a203213476028801950dcc90f6c6fea1
SHA1 af6572f8ec594a32dfb60d1dd6cf859807b00f92
SHA512 e03ef1e1e7b34712619849b48b49dab89569d385fe832d93b37194e95a6d24ee34f266bdde6c8cb1fb822c6318402d624872a2ad2eea45763f3d30c5542bbf4f
SSDEEP 768:GIKlm+QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVN/LlpPs/DroN3u:GIKlm+QWvUYe0u1jaO/L/E/wNe
TLSH
T1E3C2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D4047FA984C02C77EE51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e36f7cf-cc87-42d2-bdf5-0add1d3d8504.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8e36f7cf-cc87-42d2-bdf5-0add1d3d8504.tmp
Size 10KB
SHA256 e4f2ca0c141b1a23984c28de3628bcfd12b47f430462027a5bb25fabba1063d2
MD5 98c35c571e67f1083c8b233ebfaebe4f
SHA1 d516cfbb2dae538b7d461d50f2169dae310d81c5
SHA512 3648bcf74cc508fb23f7a5c0f7df8226605ef6c5da969bd06de613b489694499e103705d7b1d850c2a29825d412af0606ce43be94ceb9dba5009a44bc56eb114
SSDEEP 192:sxZFRzWx/flstNEdpAjxpHW6+WNnOtZYMO6OahIgyJ:sxZFox/flstmIHb0ZLRO
TLSH
T18122D8626E38697B4CC7E20DBB25BF53D6FA503260D51E58E6FC861C04E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000066

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
Size 57KB
SHA256 262fbb6a998c701f2ccd09c96916da33dea03584ea2ac691870381a30ef46d7a
MD5 aff57e752c324104a6e3a875233e8c44
SHA1 15811718d655f98a1bbde15c5ac679d2056c6552
SHA512 886c52b702081dd1eb5f91f6f4b2045493616cfea8b61e2464d0b02549d910a2f8a7e894b373b8eb781af2b298a82e2b541c6e9bf8b7b8ea74c1077834b1beea
SSDEEP 1536:sG/pPR3NIcMu3kEDliyJ0rTNGiKbBrNgMvw8a:DZRdILMDwyCfNGXbBuMvBa
TLSH
T18143F10621AE10ACA8D7BDF5582FCF843627635451FE92711787C2F376CB7AA642C2B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000067

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
Size 20KB
SHA256 85d26115281299a69682eea212327e5520eb2a0290459f7c643c811416e94f4a
MD5 c9afc5cb2c438aa9bebab66fa5920925
SHA1 ee405ac8edf97ec6bfdf61d2a5d453234c2dcbab
SHA512 ae37824a9169781bdcc8b6785a212679784776b74304a8ee47c24925e4dcf53f8c586580fed5076c47fcf67eddaf7fc0c4e3218b8aa3553c311885b0edbf1026
SSDEEP 384:LS0gHCe22RHDnRt1Ssk3oZuNugmk1rfp89VSL/ypx1CKBuStS/Ixxr+xOG:Lk2Ij5Ss84G1V89EOtLBlSQel
TLSH
T1F4A2D0CDAB7987BE34165005E664868AC94CC6C29F6FE02B01EB7E85C978638F5460B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
Size 681KB
SHA256 8cdd7eb637141293c1ad365d8f9717c628ddb07733e204a13f65b107e8764829
MD5 0c5591b1976d09269ce2d909165970ea
SHA1 e44830ed258c285c2523a82cb9febd7d272ae9c8
SHA512 5c2013ae7cafbe1769c5c9bdf4078d813649d4d71312a6a308971d4d7f49580e4cd38d0f8aa12296fce8035b9c67bab32ea24fe8fe6d0c8116f4a945e9d753fa
SSDEEP 12288:RD9DzdRX/fGktJrSmBEHRhK3yOaOQqmfooMUBIP27PBpo4v:h1dl/uw1xCh0ZaOQDff7PBt
TLSH
T195E423621E447A9B094ABF30E8EAF98B151349F572AD8DDFF48D1C9AF27129311087D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 298KB
SHA256 6eae361299b79e1e8e900a4443164170291c80ecaf779d85fc7aeff55d797c6e
MD5 ec25ec2e84f63b9d0ef7affbd5c62457
SHA1 ccbd6120a4377a904683f122351d95fadeb535d2
SHA512 f3ec9138bdbe40d40c1d286f352328701f81f74d80bacb63a4cfc8bb11535351add19fdeecaea8582bc8a10ca1c2aec278b7680b1f04cd951da0e77c68f3467e
SSDEEP 6144:xC1+LUpmfSZxYiscrQsQcXsSBJAnBdiQzyiVjCf0TM:81+LfChd0asSB4BdiuCMg
TLSH
T15954236D56C4E23E7B930C7690AA7133F470D171DA6FBB0AB90F612CF1E22446724BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

05387341548e4865_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\05387341548e4865_0
Size 243B
SHA256 0f17ff7d98d42f3bf9e90740760141ce0b1147efd5265c92cc3d083c97649fa8
MD5 393b798c6f08fa892d8df9cabcecc6b8
SHA1 6b95a4b2211f2292055225e5e05f83d3ee31f041
SHA512 b69d61ed4d5cc2cb0802b7820875390bf1f30b93a01c7a41437f9fb95983ed5ca510f68833c2239b268ec0677a38dd10c7bb35c1e856735804219eec3dd6ebd1
TLSH
T1ADD0A79369642469E57E59F4CA7942C892B2925850C8C2A4A044F8FB20989B19047026
MD5 SHA1 SHA512 TLSH

Submit Download

1d959f299f26eac5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d959f299f26eac5_0
Size 8KB
SHA256 10366ee36de1c6099ef07ded40f8891a7c62e110fbf8414295194d0192050e4f
MD5 61503b7ac00a796e57d64ad08e781e16
SHA1 3c16e7ee4a20e2391cccf1bd85a4860d4f00a368
SHA512 92e5457275ec722042c95eb3e303be1cd858093af097346d10dd75719eed853dc9cc7116475c6fa4399e574138baaf9b049c6cc3e8a607db0a519755277f1b08
SSDEEP 192:pKeJIEkSe05F7KFsm+KTbKa9IXvPPvbgzpRzWt2NA:gEIpS551KFsm+K/hiXvPPvbgzptWt2N
TLSH
T1520250C7B7A0AA85CB7217F85242C662773940586AC3E727B2E8F3342C5A1D20D49C9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d959f299f26eac5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d959f299f26eac5_0
Size 244B
SHA256 d2ac74664df07bb5d4cea4e647a75b8d1f7ddf86b715db577f94143450cbead4
MD5 fffd2bd662c4bf414e117b13da1fe4ab
SHA1 cce67aaf62a294c72cc5a0f38aadc8eec3b015d6
SHA512 d1cd6eab29c7a51c52957d6e8faf6ebb268b9fd92bdda75781f4d242e1becac4b23edb9d309c571b461abed7e8727cb1753288a65af12c4f895dd9ab31b1579c
TLSH
T132D0A7DB94305C41CB78C8FCD66E9248C702751905ECC0F9B08890E73110971D551512
MD5 SHA1 SHA512 TLSH

Submit Download

2871edb30050c73b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2871edb30050c73b_0
Size 332B
SHA256 a2ca18c9f0f048f47306c0c1291540926de5576040a17abcbfcb60816cd921c4
MD5 0b2235f7e7706eba292609a41781c277
SHA1 d383030b75b7c7660cf38c9c33474f06062a542e
SHA512 43abce12ffb93497cc377d171068c62fdfe253f753b02056d02ff23634e7421ca05b20941a2863953e02c5c0c60df74006b93d3d05fc2aeaf6c5dcb02ffe2c02
TLSH
T16FE07D737DD48518CF3AC9F4A13E9249C773D53D48D89551A418E0E27148730675645D
MD5 SHA1 SHA512 TLSH

Submit Download

2871edb30050c73b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2871edb30050c73b_0
Size 328B
SHA256 8e3a3a99f12fbbeca9324af6ddd2296042aa98160acb4b15bebc0aa7ea6457bf
MD5 47bf54cb62e59751ae2e2b3522d4d69c
SHA1 c0c177d7c23c67d93ddd4cab0867d7da6935514d
SHA512 00a85fc13c66eb847746e429ae53ae1efc5a195c2b88342925b4343dcc7c1d4321718296137bed2011a369b818f2a5d3443484db6c4c33b452b763516078da02
TLSH
T127E07D73BC918918DB3EC5F4923D524A83B1E42D08D8E5556418A0D27104770764685E
MD5 SHA1 SHA512 TLSH

Submit Download

2871edb30050c73b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2871edb30050c73b_0
Size 272B
SHA256 f494b06a072d95459cb600246020c5e8599e53e7e8108343dee4b76bd4cdef41
MD5 a1d693ea49e91f8a2e6e000bd9719c89
SHA1 ee2350572a019445c300a49205ab1d027b02333e
SHA512 8ba737925f3f5e02a9a9d336b0500ce9840623c5ebdd5bcc738e4dc5a9711ff7ecfad7a5e25df948acac2128506d21cea0f07b59111591d14bdb1c8033c452b2
TLSH
T1A9D02B6348509481EB3CE1FCCA7EE24DE33A9219019945E4944C50C7A204670B255861
MD5 SHA1 SHA512 TLSH

Submit Download

2871edb30050c73b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2871edb30050c73b_0
Size 328B
SHA256 40aca463ca146a941ce84c7cc9e0b4f48d6c3b18a86145a08d90f4aef196bd67
MD5 f4684fbfc640d81cafe66dbf1562fcc3
SHA1 a28329d06f4206a8c10e7ac66371f68d264a0ef7
SHA512 25a1a97eea39c145e6924f7cf76c3dc17bee1b06c5ba7b31f4ea6fc8260630be99dc96199c916dbf1c530a0da16c6d1f1fb540fdb907f29e3e900d77da23de3b
TLSH
T1C3E07D77BCD68504CF3EC5F4823D52498371D42D08D8D5525418A0D6B10C7305A4645D
MD5 SHA1 SHA512 TLSH

Submit Download

29a702a5818660bf_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\29a702a5818660bf_0
Size 28KB
SHA256 0831f803a4a5c96b36058f173d66f5008697a9fc6c5ccaf48091ff51efe4f7e2
MD5 aa010071c12f5ed7cafb18cbdbbc3a58
SHA1 5e2b3099c6710fc61b71199ea9a72ba1a580a31c
SHA512 b26fbbfde7c4477028afd4bb89998be4aef61550f4801f7ccfec6f6ec5190f15bd7fc82b3579f0d54108338bb91ccfc9f07509c109d009baadf7967c8805b075
SSDEEP 384:p2JEZFidhCUTxBw8sHIqiViDNrtmnNdMSsZGjrBrlPe4jyyvhewatpp6vWy:cEECoZsHykpK2SsZQxlm9tpp3
TLSH
T152D23099A7D2FA9DCF2363F80211C977763149AC2DE3921722F4F6291C5B1D94E4AC0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37636119439dc03d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37636119439dc03d_0
Size 3KB
SHA256 ab00399acfb69f8923dab02ffb717ef2c695741168f66d7a216fe1a5e61e8b4b
MD5 1a9367e600e45423a9487b44178983ad
SHA1 519e094bd849bddbcb2cb1871194d0010dff2c2c
SHA512 35223f61aead8abd0adc70ae1b5adb0ca1824b6cea10dc802765a97a0a021e4839c8ac16ecb503c4139b337bd4e88e601f33417ecdca66fe0aa3508c0a9df378
TLSH
T1B481F181FBD49F19C72723F01257C672A332448D9AC6C72772F4A2392C5A7C15E96C5E
MD5 SHA1 SHA512 TLSH

Submit Download

37636119439dc03d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37636119439dc03d_0
Size 276B
SHA256 5d0e949dd5635e47c191b6595783bc2e3f60a3bbdf0392dd8bab2717fe4b326f
MD5 ca8cc35a27fa67e8b742e7c606a2f241
SHA1 ced8f03463cde8558717be6dc53880e83cd3bed0
SHA512 3f342f5b4f1e96e7ef405472e18b379f60a68a08cf6500633bd264518e2054b687db5f797b2de2f520265b408c3fd67507d71d744e00bf49cad272a9ea84a218
TLSH
T1BFD02B5B58400B8EC51984F5553F9014D377C8B814DC81A660E4A0D71575BE6A191005
MD5 SHA1 SHA512 TLSH

Submit Download

4032e0cb9f80ba0b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4032e0cb9f80ba0b_0
Size 9KB
SHA256 415fc92d4d2e2ca79e76f3fa2d2e2053de09b6893c3fa6664a3064b809679de4
MD5 30ea642d7f9fc2e22fed416b82ff3f5f
SHA1 8080560d931eac46ab7d19816cce2b3031c43313
SHA512 ea2772cdc471af521f724d17a74dd334f32f6dbf0ea80a3a9e2b414a2ef15b73d1af554c6622077abbaecd206aa3a190d9ff0e25ced6420d2eaebd840edaa88b
SSDEEP 192:1H4g4nNBVzyrCFvUW8ZM92zgI6G0MHaeGmZErJHbp:GZzyrChUW8Zp8I6GN6eG2ErJHb
TLSH
T158122EE99A936AF3D4B44A7A00C3D32EF62720D86ED66107872570A178137D558FCBB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4032e0cb9f80ba0b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4032e0cb9f80ba0b_0
Size 268B
SHA256 b2d1e4cb32214731361d21a1a4bcb2e4a4f40c95ec5787efd4759134494af6b4
MD5 f7e881df9eb8cf8719d5e5215103ff52
SHA1 421603b1bd9d528c253563bc2f60a7968572c6b3
SHA512 18a8cea924dacffac26320e5fdcab68f3b8c549ee14a2af6e9d3868217c12de8229ac2d12ec5e87e25e64f10fe35443bf1ac9bbc6235b04fcb0159118df98f7f
TLSH
T1B1D097D788608C88CABC48F4C43E2148936361AC08FCC2E030BD90F729383F2806847B
MD5 SHA1 SHA512 TLSH

Submit Download

42653a4f95cff68f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\42653a4f95cff68f_0
Size 239B
SHA256 37ec69cb6ce9daaf4cc9f3c3b2aefb1001d93bd2fb37c05f541faa13aa5baf1c
MD5 f0d4e71c44cc4d2bd5c3e78522a28d62
SHA1 32473681a4fbd615fa1e7f5eb1ecd4bca0034c61
SHA512 63fccbf967601caf9205928acf80e4e08a0d0c6e66d1221f2efa4a08f9b9b2fae9ddaab259c760c44cf819b61d5b92bd47d9c4d606c42b1e35934a2b670c1841
TLSH
T1D7D0A76365092850CB2DA8F58B6A52ACA662812854A483D5914574AA124CAA02846016
MD5 SHA1 SHA512 TLSH

Submit Download

499d1f44234491f5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\499d1f44234491f5_0
Size 1.7MB
SHA256 6ebf2e44d77be919e783d917b4911fe9052551edf64a2180aad73e060935ebd5
MD5 0282c17cdfcc7678f031c73d19e067af
SHA1 f57c84ff992e46cb9782641fea2e08c05ba01a39
SHA512 d790fdb0ca4fd3f79eaf00c48ca95f4db547b54836af16e985706e6f0f6c8636e681c7d8d1454ab9ffe415cad762b12414b9d9e38e12208e4fa43f0924f4dde8
SSDEEP 24576:0LhHe7iCKfx0W5f0M1UuBl65tDtxas2OUY6p2M1uv:zOx0W+uBl65As2Q6p
TLSH
T1F685518197D4BBA9CFA753FA46669EA2F730815D2FC2D30761E1DB282C4D0C84E54F89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67b263dc2f9787cf_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\67b263dc2f9787cf_0
Size 322B
SHA256 64e208ceb6a073d3ea86ae743b6ee6d694da4c7eca765daa141deba86ee6a98d
MD5 ce24d7786467ea5211d3440f65a2f2b9
SHA1 cb14fa4e7e6f072791e6a5aa418c2bf57b2a395d
SHA512 2d7f6cd6865cbd5c9cfa9813ed1cf157ad2f53023dfe01fdbb89da6d811e7053499248c671a2911e031fa9d47a17d0fdf540216f959b46e8079386a75dea2403
TLSH
T13DE072DB01281E04CA3B8EF0F1BBA1098B33DA2A48DC40F47038885A2076E60029DAA2
MD5 SHA1 SHA512 TLSH

Submit Download

67b263dc2f9787cf_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\67b263dc2f9787cf_0
Size 282B
SHA256 5eacd35dfde5f19226074ef6a09b76a616b49bf7520908cfcc3f4966ee14b857
MD5 b5847d8484f69a65a6850b37f997e8bb
SHA1 1d87079b3a9a551eaa6215822845bfe8fe8329ca
SHA512 8da18a19ff68f0bcc251aa117f9037b8c901b9e2b8a15a4ba7f8cd3af7d09aa23ff24ae20500ff3a95205cb19bc8b0d03f55557e4c3ffa6f0c3620e122363f13
TLSH
T119D02BC755551D04C63B4EF5E16FA20ACB62861C5CDCC0E4705884AB1228B500689163
MD5 SHA1 SHA512 TLSH

Submit Download

a9c0cf2ef1c6c05d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a9c0cf2ef1c6c05d_0
Size 284B
SHA256 70f84e8d6d5b2570a82b5961f04b34891c45ffcce9f7042dfc88d3631c781cd3
MD5 9c79c962a37cc4f9dec42021a15cd7f9
SHA1 a19c3f855d7207fa184382a440ac54fa3647553a
SHA512 beeef1ef545fce098e067218e3bc03ffdf1766d040c236aafc4e13863c973f18f8f96619d6b2326b19f04090f1967e7c62d45bb3f1be65f7b272cef6eea2e0c4
TLSH
T1B2D02B7B88580859CE2945F6F2AB928AD352D16C15C4C6F9104450E735C67B0A55E401
MD5 SHA1 SHA512 TLSH

Submit Download

a9c0cf2ef1c6c05d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a9c0cf2ef1c6c05d_0
Size 284B
SHA256 a6cd259ab4d6f0dd73497d826131c83af17eda8dacf9c0c3fb5dfdb934b94fe7
MD5 48d1f43c205c55bceb9cc0dff8a0f494
SHA1 fff37285dcae8462a02d32980765c6b6b664120f
SHA512 5e133f8ecd1cc4225f7321bb3a5dc2dd965f33c754e8a91d6aef444dc42ddb28205c2342598137cfbc141e9aeb8d4f4c5ab834e01a7478173379022f451eb7df
TLSH
T1E9D02B7B8918085ADE2895F6F267924AD752E51C518485F9114450D335847A0B14E401
MD5 SHA1 SHA512 TLSH

Submit Download

a9c0cf2ef1c6c05d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a9c0cf2ef1c6c05d_0
Size 284B
SHA256 8039f378cd3618ad0c21cf0d5535b21e73be5491f070778dfff39f07a45f3542
MD5 dc6f9b32901e287d52dab6c3bbd1faa5
SHA1 903bca72db977336d4fe9316ab6b230fa2492b2a
SHA512 1a3cb697857f585158f2a612ddd28604d482c5a6a05b4d7ffdf9008ec41b8aa2b82262d3272de5ab15d82a44f84bc019d6088e8511ae104c8495e63ba596c224
TLSH
T195D02BBB4D284849CE3845F5F277A249D753D63C558485F9204450D335847A0A14E401
MD5 SHA1 SHA512 TLSH

Submit Download

aea8caa81b406199_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aea8caa81b406199_0
Size 298B
SHA256 df3076baf0d5444e774a3cea72272b693dc4a78c8873ecf8057b892f85b72791
MD5 463d117a4488eba8a5ab6cc96ea6dd47
SHA1 0b881352bf531cbc2728f3675c7e928139e0b7d5
SHA512 cade9ec13e93148ac3ca17f23a6e04b35a0e0292fc0cc0f86244f7d5e372b64c65d4a6643120eaba541fa33e309cee6cd2239ab0a9d3c4e93de21e3b8f70a0ae
TLSH
T121E0EBBF8C011000CB3446F1EE33A55FE3A2C8CE4CDECAA87049A0E32682560A48A893
MD5 SHA1 SHA512 TLSH

Submit Download

aea8caa81b406199_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aea8caa81b406199_0
Size 258B
SHA256 f2478abdc7eee176a8f265dd2139d7257d701864c27eb49c41bc06c91e423a5e
MD5 d685e7f3e6061490e2c606f9e67f970b
SHA1 37b7c774a3b3054d8dedd8d9c66e3514a29440e7
SHA512 a8952e9e7bda848d0487eca840c69ca4339609af46f24d1199d8c6c77c774c07138e053cf8ca888d244f27be8c15bdb5b860a9f2542bc861b806e48d9fbd0fef
TLSH
T153D0A7779C154404C56C46F6DE3FB15E8362C49E0CEA82D83086A1F323959B15896463
MD5 SHA1 SHA512 TLSH

Submit Download

b52c05a7ff5934dc_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b52c05a7ff5934dc_0
Size 573B
SHA256 22a4b3142e116348a664d08b9219347ff80e9feb3fcf1d18fde4f70f02486f67
MD5 bc4e36705e0eecd728c4acf96f5cccda
SHA1 023eaf6c20b56b2ce44dc86874f617dbe5f219b0
SHA512 c62c5c7309a84909e7633ba72b442f0ef1cfae9112a4ac263abe7c7ff46d5b7053d3f205edb7620280d567efcea7e9959a61067c93558eca5a01d2b64b7bbc23
TLSH
T122F075B735C0487CFA79D4F7DA5242143AD3520410C2C7E1F961F0DF39CC9D04985691
MD5 SHA1 SHA512 TLSH

Submit Download

c9b4a4bd8efa7be3_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c9b4a4bd8efa7be3_0
Size 44KB
SHA256 0e1a7d735283520f1acb7d7913e74ae5f905fef0badf2a7e3a165dbe0d241f1f
MD5 e22093470eb58992d608e6ae3a93d643
SHA1 3d722508caadab32d367c988500b9eb3a0f71c79
SHA512 e851bc683b4637a294f82fa4b22f56c3499601c5cba45227ed5b949760f4c373fb1bbc3e9c91682bd19c661e608b3829f0d93f3d5477cd3b4a81a80d2a1b04b3
SSDEEP 768:8KZY7T6HA4sLYF2VsptEynkgjflwMe0D4Ibzsk0ND9Z/qu4Y3eSiUezhS4Kk:8KZ8J4cYF2083RIck83zuzhTK
TLSH
T1C313C760BB90EE29CF3713F49162CA63673154482F9BD31771E463262C0E5D50FEAA8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd6752020e1a2f70_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd6752020e1a2f70_0
Size 76KB
SHA256 048b4c3f7829f1b9b70449dc46ed07fc0e3d6ea681e3909eda73c352fe87a55e
MD5 45373e0b4487b8c8cdb27174038d5ae7
SHA1 c2c8aa2f4cb72b003b9040505eed0192bd841876
SHA512 3e81b0edff2980115466fca3f5134ba8c70661bad63f6638945b061fd26ff2375c804418b98d76a9ffc638a97a8ba0f8ef95fa23ab73699ad72fe1456605512a
SSDEEP 1536:F4KIxVZwxLVdRVA24O2TEi2LDePk2QHJ9wuxFd:F4KdxVCXOMEi2Mk2gJJV
TLSH
T1BC7382A6B790AF66CB3367F402118A767731855D2ED7931331F0A2292C0F1D94F6AD8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8329b36314ae228_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f8329b36314ae228_0
Size 282B
SHA256 db91310638bc8048508388e9fef3872fb625466d0fee1ab11d3dc8b92cc63e85
MD5 e55d55a28d19b39ebc70fe564766861d
SHA1 a5fabea0f5a3e64fbffe92ae989bd33f6ecaea7f
SHA512 30e52d94ee45e3a093851d27da95feb0d67c03e50483f7b4b08840dad53f5283a3debaa14d775abfbc51fe4d90e4619189ac2706e4daba2c82a3567c6408b4a0
TLSH
T1A9D02BB774587484DA2E29F8CE22404C5252B19528D482A0D504B9AB14D89646445015
MD5 SHA1 SHA512 TLSH

Submit Download

f8329b36314ae228_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f8329b36314ae228_0
Size 306B
SHA256 3ff16dd04543be701f424555e8ad74fc6dcda5a67b45bfba6414373072ddb054
MD5 8e37ee6c8e19e9c5c838f78a84c19e84
SHA1 77dd73440658beaf8ddaec089e2ba4bec3f9e2a6
SHA512 5cd4acd3a810277410654292e719d040ee286b50ef37a3e4d133a5751d0e517674d20dad811d3fd5dfef9720aa3e62051bfad669eb3210729b90fb8fc0af9a33
TLSH
T100E02BBB344C7465CD3E29FDD933505E7262F1B924D4C3F0E144FABA14E86B01849115
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 d64b7541ee112351dada3cd5de1f3365b6bf7bd91bd190c0ed550474a28b5fe6
MD5 80845a74dcbaab82406dda4398f115ea
SHA1 08bc982f96600f4e010885275e2132a62261ec31
SHA512 1c702348049c6a58c3d0e51f781fb07146921df2eee965cf8290b7fdd51446756ae31d1aab12dccb2c271b5f4eca7e17008b0dbc04c8f1fb989a139660163017
TLSH
T15981C5B5F49888ECFBE8643485E26CBBB23476704D5B1F5230D5FB38014AB8E4C02007
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 dd602465ee0ab9dd2780fa176f3ac0218dfae800527fa74b71fef85d7aff24f8
MD5 0ccaf31cde48f3c949463f6173e51fc5
SHA1 3c498a2c2909e1a57266a45fe2ca309eb15a913d
SHA512 b0946b464f5e85c62ef2ba0f8b8cc1bbbea983f3f741cd84a98eed4d1398c301d59587d888d68107b9e289ab6fae6c9088f3d3b9c4c2ebc4ef0df017bef1d8df
TLSH
T1E6615075F45888F9F7E8A87096D61DBBB1347A744D8B5F5270E4FB78058AB8E4C02047
MD5 SHA1 SHA512 TLSH

Submit Download

ec482ebb-8a5c-4405-a1f7-078bcb42fbe2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\ec482ebb-8a5c-4405-a1f7-078bcb42fbe2.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

1d2870f9-3d3d-4f21-80eb-4bb8925a1336.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1d2870f9-3d3d-4f21-80eb-4bb8925a1336.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

458e96e9-92ba-4c26-a270-3bb04c4d839e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\458e96e9-92ba-4c26-a270-3bb04c4d839e.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

bafc2b8d-995b-4446-9c9e-9b4184c717d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bafc2b8d-995b-4446-9c9e-9b4184c717d3.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\45498a41-07b7-485c-a295-450bc2dfabc9\index-dir\the-real-index
Size 48B
SHA256 e1f4590a3f6ba4ab2d708b3eb02a638fe0b2d99ca0eaf9c8c4c9eb680bb2f170
MD5 7b2ea0f37fb8b90544cf7afc5b94bbda
SHA1 e2864cc8607cfa84c15185463af711a6e2b726a3
SHA512 0b8c3929c2b3d081c40adbde9ed87a723bd1268ba2b02f943623059268c71ad7e1c909cf2fb430dac70f7a15957bf200a3c452efb5c4555d495d718915d72f2c
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ee1243c2-e136-4c48-90ed-cfca1b17aef2\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 137B
SHA256 2ab330a3e7515b20e1a0957e91c3cf47d7963b396333c8f74c6667c3e5c70dcd
MD5 273f5355ed612857b157e17e003272d1
SHA1 a8f381c7a93d43f99314a43b0df95314f4189b70
SHA512 2423399ca5145dceb4f25ef3bfa4ebd4eed3321395b5d57975aae15b84315fe18d1c5359e948644abf13332f4949719d3b46c683445b260a0e7877233203831d
TLSH
T17AC02BD6101085864B305AD52038130DDA1FCC0C8CCCCCF8600CB0413034513880A827
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 130B
SHA256 3c10627329e92ca4ac0031f5c6ee4c2525787e307836e10d3b9604f28f7ac3f9
MD5 2debbbb1fcec770e2ce3b092f76ea03e
SHA1 f5a3be905292baa0f13c7dc53b583a8a5c966e7c
SHA512 d2a8b2f4d43e3358a7dab9004fcdb47cdc175d4970a60dc27b81c907173d404aa78a0f0b426b5f54369990cdf3ace431a15077e5901348ce20fe12cbc7f9e86f
TLSH
T1DCC09BD61410D54A5B70DFD91439572DDA1FC14C98DCCDF8650C904130755134857967
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 214B
SHA256 2cc3d79838fd3cc5180943282c0942b67ffb1e82bbc126fafb865afc888f7a0a
MD5 c3504270e7d0263996b2f7320563572e
SHA1 610d5738d62a29eb1d3c1ed0de376dfd9d86e43f
SHA512 c00563fc6ee31d476c7aa9a73f3868b5ec5a6711bf7fd0f38998c995a5af3a6a2942b5bb2f38e28b3e876e6675aa7056290ba34c227b73e5def47ea1ef51a668
TLSH
T1D1D023D90530C8062770DBB51039221DD51DCD489CCCDCF89D0CB0C130F4602C44A537
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 214B
SHA256 61cc1fe48d5001f43d0906e303c15c01a03c3b1c7b1187ab70a345ec135bdcc8
MD5 44aa97023d743327b1cd27ac3cc2ffd7
SHA1 f06614e33031d034d97a5683555021b1285895e2
SHA512 1bcb513586bddf6a216b9b7c42e0364161b596616627f18c736a8a60a613bda30ee97ee243e7ca508e1f16b39129974d39476338757739f544a9dc73443fc111
TLSH
T195D0A9EE82329E8A2630AAC43028564D892E8D09E984E8E8B900708B30B8A02C112669
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 137B
SHA256 ab3b86f68869b3273a4c9dbfdab733550a46f5625ac3a0789b2440529faf06ea
MD5 d8665431225537ab4428558106c291c2
SHA1 f42717d6af1c8a6b2b9c4903748301e01134bc6c
SHA512 46e7c6e8c8094aed1838557f055755061bc05ba5047e82f4e7d3cf35a6be2fb801f31d48d5d866d512295eb419e73a1a68ae34f5a42aa66fb3aa18ec74a958ea
TLSH
T1C5C048EE96244A8A4B25AAD62038665D961F8C8C9880DCA8B60A704220B8A138596A66
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 130B
SHA256 95e0a9b10bf4c18d7b87098387d5e8f50dc125950e29faef0f9b32ed4e23a300
MD5 adce702f9bd71557ba7b3adc0d24f12a
SHA1 2457e95603db4d6dd0c6b7c7c1e049b49ddbc306
SHA512 81a062363a8582c0000024cbaee274e3ec2a21e44b1be38c32537e6ceec068ea68373d6e66c0eb7ba8710d6168b7e5af0c441a1a6c405249bdd9f32fbb27061d
TLSH
T1D1C092FE86148A8A4A38BAD93038A72DD61FC98CD8D0DCFCB508504320B8A138693A65
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 214B
SHA256 096ee4d3c9f8afe236424fa5f281266d0e1dd180df72b6f33374bfe06c175760
MD5 dac9d703083b8024d629a11f9a7af708
SHA1 d2837a97b8b24fb0aabb933310a0cd6de3225906
SHA512 978d56dd9d406ea2db13f42acca03be1928ab56b8e0193060a1d3d4cd0d9061498070401bdfdf98a812d6f86b04fb1a68a477d738fd0a22064445e4302a9667f
TLSH
T197D0A9EE82314A471630AAE92038821C822EDC09DD80E8ACA904708B20B8A02C2835A5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 56B
SHA256 c58cb79fa4a9ade48ed821dd9f98957b0adfda7c2d267e3d07951c2d371aa968
MD5 94275bde03760c160b707ba8806ef545
SHA1 aad8d87b0796de7baca00ab000b2b12a26427859
SHA512 2aabd49bc9f0ed3a5c690773f48a92dbbbd60264090a0db2fe0f166f8c20c767a74d1e1d7cc6a46c34cfbd1587ddb565e791d494cd0d2ca375ab8cc11cd8f930
TLSH
T1069002F74800819A0E20A9C82038A35DE40F818CD8C0CCF0900890423028A234002851
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 48B
SHA256 5bdfaf75171c625301895a48f8b05770f767e2db9803060c2862a94604198cf9
MD5 0d566661c05b0fa827b03c3218f309b4
SHA1 3d3a70db6caeb33c93c0c07dc4873ef6f8c8ea0b
SHA512 ad0a1f1c0a4b998021af60268e87f0398aa8a3722d0d8e0ffa6085389043ee59447b2d812b6c726b988597b83a8433e40c796dd39e8c0ae5a180cd021f48eaee
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 ea65c5792da46fe3222bbac57afafa8896dc974f3a943fea22e60e2843608a51
MD5 1036f6abd6900f49a22b057370d2087b
SHA1 ccc807af1700ff48a380ac948378ecc7a1f6d18e
SHA512 1d1932b945d64f5b34dfa67b72b945a0667596acfc742840235d680647bf894e905fef2e2c9f09046d3e2054c4ff52f88fff5fd71c7cfb2697adfe6c28cdda21
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 8abf7781da65ae9bf88b2971bd540a286fbdb7dc1d512c6b84a1d2357ad393bb
MD5 b1a898f838dd414b51df97f90d13e82c
SHA1 c242aff673e310f274bf5ececf97742b51260564
SHA512 0d0d7c7b3878c3a6dff5e9f4bb6fbded090dbe84700e2e41452b72f12dc6924007edbc31385867d6d43c96fbef47a0021cf0885b2ac68d40142b71ccef01e200
TLSH
T1DD819881307B06813ABE258C46759A5E128171F33018F9ABBFFC51E59E2AE141DFF5C9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 550521b107eb0e967b75d1a81db7ba45922c8834d32d8a450b010cbeb09f7b27
MD5 25c6b03de891bb6202ce160e53a6bc9b
SHA1 5818b059e37c44ae2830a731a309b7d4b17df47b
SHA512 3dbeb378943cb59350722571b2aecf6749658e780a48523779bd72052491f27ec10cb89b883b0d56b348d35ad075271b9fe3fc8e6c7b9961167ea11f60221506
SSDEEP 48:K0tMBdvbfAbzGTISVAK9V13AxFQYWXNNyLmBcAeEE9bI/wISY9K981+9xWtYXoMz:KcmEKbKWu9yKmIpEwKl6G+VKKOoD
TLSH
T1F3B19A85706B02803E7E258C4979D91B169230F33018F9AFBBFD95A94E2AE151DFF4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aedd28c3-beb5-4abe-bc2f-399ca4b12115.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aedd28c3-beb5-4abe-bc2f-399ca4b12115.tmp
Size 12KB
SHA256 c80dcaa8fba62457d5733ec8c934f1eb14f24d0737e20f92ed6cdee0d53ecb9f
MD5 f7772fdf31d69401efd3e5801739767a
SHA1 7bc2ad48ba5105fdbda32838d148c8f684a98dce
SHA512 fee25e90096d973dcc475c6dc89ba85673fc651f35ef6ced26f1f6c600a003ffd972a3ed6b6da5476366105436969134f07776854f7534182e8ddfd176a127a0
SSDEEP 192:sxZFRzWx/flsFSIdpi8TcgHW6+WN+sbphBae2G8MO6Q/phIg53J:sxZFox/flsFb/HbphJ+z
TLSH
T1E942C863AD34597B8CD7D219BB24BF56E6FA503690D01E84BAFCC91C05E6EDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b54a2b70-e26d-427a-99a7-59f43abe4651.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b54a2b70-e26d-427a-99a7-59f43abe4651.tmp
Size 11KB
SHA256 158b1eb17d0e116d133c056368e3cbdbf9ced270c6018f63aad1cf78d17df45e
MD5 81e09adeba252c2f4751ea4b66c170bc
SHA1 55dc5787abaeb84d42706a871be1d063a35b58f0
SHA512 6a829928a615cb11ad5739f9b3a15dcf36f253945b6132951dd9b1f998ff9d9a7c2bd4c0eae440c49f68efbfbaa8a3e4d1d32254fd47d25553d8929fe311ed02
SSDEEP 192:sxZFRzWx/flsF9Idpi8TcgHW6+WN+sbphBae2G8MO6Q/chIg53J:sxZFox/flsF+/HbphJ5z
TLSH
T16C42C763AD34597B8CD7D219BB24BF56E6FA503690D01E84BAFCC91C04E6EDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc0da707-496e-4aff-be3e-c4f0e24d9bcd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cc0da707-496e-4aff-be3e-c4f0e24d9bcd.tmp
Size 11KB
SHA256 9be9ffd14769adf8c998fb3d77834a5273b1611f6e13e4a8fe747a7f0c885309
MD5 2ac8db1ad42e7cde430ab41422f3a4af
SHA1 5e3cf974f7652801f2103ea6b93a30f1dad6ecba
SHA512 7c7d62176ea14fbbdf691278a69b8aef1a8c312ce0bb805dda25873a4892c46ee6b2f6341f2a6c476222bda91734ec3de7a14164f9062fdc02280877d3657a25
SSDEEP 192:sxZFRzWx/flsFzIdpi8TcgHW6+WN+sbphBae2G8MO6Q/chIg53J:sxZFox/flsFs/HbphJ5z
TLSH
T1A842C763AD34597B8CD7D219BB24BF56E6FA503690D01E84BAFCC91C04E6EDD224780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc3287d0-fd27-4449-b7c4-c8190718c144.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cc3287d0-fd27-4449-b7c4-c8190718c144.tmp
Size 11KB
SHA256 ea93dc7ff381ec70c66c4f3575571a9edd05a1344fea73ba4d73bda471d3d231
MD5 246bf16eb6b278262f111231c02ef776
SHA1 ae9e96bc4718360ee82be9fb4859711c56c53749
SHA512 f419b98d5010c56e98be05b9eaaeda3299238db26d2c9128d2ad2183c027bbaa1fe6adb2f807f3f2e280f9198a27073205ef224991ec019daf2ea17664abacd9
SSDEEP 192:sxZFRzWx/flsFoIdpi8RlDHW6+WN9J+FhBae2G8MO6P/chIg53J:sxZFox/flsFZdHbohJ8z
TLSH
T10542C7636D34697B8CD7D219BA24BF57E2FA503290D01E84BAFCC91C05E6EDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d1b47a87-61bc-4267-a944-576c5eb4d203.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d1b47a87-61bc-4267-a944-576c5eb4d203.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d1d148e3-eed6-4bd7-8414-8bb22f4e359f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d1d148e3-eed6-4bd7-8414-8bb22f4e359f.tmp
Size 10KB
SHA256 b170a66c9508e3b2e10097a6f1d487e593e065619a91ebfcdabb9a5228c6db56
MD5 cc6a05bc49377bb0d9b50dfd6422fab1
SHA1 c2e3ea7700a01640cd20111a183b8d92ed838e4c
SHA512 359812a03cf5ba49fb5636142dd5c3881e6f55d4060112f5bd3f9359be5701584cef5249b0f634b8eb5137619403a8d015bffbc884de6ce2f08528d02926391a
SSDEEP 192:sxZFRzWx/flsFnEdpAzcTHW6+WN78yqhYMO6fcahIg5ZJ:sxZFox/flsFkRHbUhLnh
TLSH
T17C32CA626D34697B8CC7D219BB25BF57E6FA503250D11E58BAFCCA1C04E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4e98d6b-31ed-4a7c-a633-84f6eaf70a12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f4e98d6b-31ed-4a7c-a633-84f6eaf70a12.tmp
Size 10KB
SHA256 a465e2069cb807b676776be9963d9559c3298a2aa39b90f8e56b994a9fe72917
MD5 dc72faa5cd5592c109f2760a4750ac48
SHA1 e265c814655ce72c57437f980d413b04d50aab4d
SHA512 4b781403bba62cee85651528d25a6f19d7e8ca6d308d6235466c5fb9e4968b86971726bb78cbc10f0380def988d26e1bca86cfac86ee6e2e0f9aad8ad061d70c
SSDEEP 192:sxZFRzWx/flsFGEdpASLxHW6+WNnLBhYMO6BcahIg5ZJ:sxZFox/flsFZXHb9hLhh
TLSH
T19332C8626D38697B8CC7D219BB25BF53D6F9503290D11E58B6FC8A1C04E6EDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 2b3b263af55936645dd1101a00f93cac40cb833ab51aab40f43d211659cbf869
MD5 f2c6f21566d0878620fd7b55a9d6188f
SHA1 55e2d99e4d45124bd16657cd52732db43706d5ed
SHA512 3b7b515e83e65d8f68ec13ba26f85f88676134b7998067290129176871b1bc77d35e0e80b59110f4b876c4de039a97d0dd6bc4c623b104c3fc63235e596e5676
TLSH
T1E02155C0A38D24C86F89E5C1852DA80374B12EB9110E5CF6235ED4F84F88C2D1A7FD21
MD5 SHA1 SHA512 TLSH

Submit Download

b7aadb84-56e1-4758-b021-95df1bd3d1f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b7aadb84-56e1-4758-b021-95df1bd3d1f2.tmp
Size 12KB
SHA256 c32c8cb0c4d02e0217357aaec4f0d401f2c19630a8e83317553f79b2d7cc4c13
MD5 6ec54c295e62471ffe5155e9642c4788
SHA1 2ce4d918be475c8f47e7101656207bedda16de67
SHA512 31e5c346e0d8aed5683ed739b0b08e776448a8946522e647186c537c9ce2bb0101bd3e9822cfe881f4bf90f7dcbd9173557a1471293adb5570ea70475ad9e3dc
SSDEEP 192:uucWsN7vQiITUbM8QmiU1oP1Oh//oT5Veqxaofdq/qOB1D:nnsN7vjbJeQh//oT5VeQfrOHD
TLSH
T1D5425A75787AEC775DABA245F0473A538FB420BB9AC01F94E6DE9B0C05C6298170BE13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd5c99bb-e98d-42a7-ae14-a68669de64ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dd5c99bb-e98d-42a7-ae14-a68669de64ab.tmp
Size 12KB
SHA256 7cdff6fe1949b06fd0de11be4bb9b4b06d06b0a2d76f5ae8a03be90ab3f5c543
MD5 b0f1c78b410eca7e33693a1cc7d1d7b5
SHA1 ae7db1a8c7a11d0a348476286f65067f9a6d3729
SHA512 0c516055c7f5853fce357b10d8619c3437ee07e23170be6a8536c17b4a11c236a429354ac6a1c20df94fdde0bc9bb5b437ade7b6c297fef31d104e7b1147b52e
SSDEEP 192:zcWsN7ZQiITUbM8QmiU1DP31h//oT5VeqxNofdq/qOB1D:znsN7ZjbJJlh//oT5VeZfrOHD
TLSH
T116424975787AEC7758ABA249F0473A538F7820BBDAC41F94E6DE5B0D05C22982707D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f5b3e61a-d50d-45f7-93d7-e8f276687e98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f5b3e61a-d50d-45f7-93d7-e8f276687e98.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 82b17a886f470fe160e067f4f9d2f4822412553630220a27155bf4077271df06
MD5 e1e5aeb70d07e70d05c4d2f0f6b87433
SHA1 db8a3f90b033da38683a471be1098877ac7e7154
SHA512 17eb6d9c09150b3933392e57e323051c4d785178f7e2bdbc98ed676e83c85a4fa5d735fad970662cc36a947c35395c5b731093ade611476cc1c7778dde0f7a09
TLSH
T17D41E958A6E91148B3B76F5A9FF7A86E487BB9772F0AC05D10110E4F0662B40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download

ab1d7431-9b8f-4726-8144-d83104572df4.tmp

Path C:\Users\Admin\AppData\Local\Temp\ab1d7431-9b8f-4726-8144-d83104572df4.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b94042ea-eced-48ea-963d-aced4749c555.tmp

Path C:\Users\Admin\AppData\Local\Temp\b94042ea-eced-48ea-963d-aced4749c555.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

ck_240680125.db

Path C:\Users\Admin\AppData\Local\Temp\ck_240680125.db
Size 20KB
SHA256 8950bc0cc000e06a92aa7a7fbcff157b777e08a1758ef70c4cd3c46d73f7bcc1
MD5 2b6e471a19b82b6c999b6e3689b7a0ce
SHA1 7848aa844724845f31f70506a2a165b1607525e6
SHA512 d8ccdfb24a86611d19da260c65b3f98f281a5b9885eab3f28f9f4a56b4b90d9207761623d705e4a6b99f0efff30c0978fe79540af6b8768cf57a819231a5360e
SSDEEP 24:TLyW91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fBb+d5YuccWCXO8fl7j:TeW9aw/aHLopFMavU1iBKHicWCXOmlX
TLSH
T18392128F0F303A15C4F88732E9C2499B1E7D252C93537699EE5020F3DD8249BF5155EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ck_240680125.db

Path C:\Users\Admin\AppData\Local\Temp\ck_240680125.db
Size 20KB
SHA256 de48f5c4308a2477450952a8fd6462c411cc966f9e0fb0065a252b3be831a482
MD5 7696a61462ad640aba1171c8c42f837d
SHA1 4b1efd332c87a107f7b72f71e4b88af6c7994e05
SHA512 4b9849565bdb051e85ce777cc950516fa73b8beb75d54cb794a536176e9c239c5ec46de257c01b028924579d94ef7ddba31872ab244d4c2f999000814437e8a0
SSDEEP 24:TLZLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T9LopFMatSaw/auUOt8B
TLSH
T1F4928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE925ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

infz_shot.bmp

Path C:\Users\Admin\AppData\Local\Temp\infz_shot.bmp
Size 5.9MB
SHA256 e05729b638fd8d9131a578f8a7a27ca4ccb571b24827ddbc31fb7b503ab4ff22
MD5 42e6309c9ba0c088ee18e1cab8cf2a9c
SHA1 2a753b43782152e1e678b7b57b1820f962264bee
SHA512 171e5fe611d202d2ecfbb48d210cfafe3d81f3675c9f8f0d9b2edaea922f4225b20ae00d5632f96363ff8620ef069651f817196496a909a37e9693aaa2065cd1
SSDEEP 12288:OjhlBcmA/qu26gP4g5QGFqpi6Ceqjjg53EQkqR:OjhlBcmxu26gP4g59FM505qR
TLSH
T1B6564823B5EA7A54EA3A3979C2F4071DA324EDD8B744078F852938F0F1923855D77AB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a240eff-ffd4-418f-bb49-9cbd5dcedc97.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1188_828054377\1a240eff-ffd4-418f-bb49-9cbd5dcedc97.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

infaz_2.dat

Path C:\infaz_2.dat
Size 75.7MB
SHA256 609b5e40871cf29df5211f47e67e0c21ad47b1fdd6b3bb59b57cbe3ab832c213
MD5 417da7752c1d03931c643a6cec3f81a1
SHA1 cd0e40bc3a7fcbd9b978d4d0a36375f6d2b0db91
SHA512 987139210039d8b211c83cbd95b847eee1c59c9454f4acf0113a5e8849bc6ebbd55eab1395e4c3dc8c40c0a69a7d44609c57c6ea70e45efd2cf22e5df3c47322
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_3.dat

Path C:\infaz_3.dat
Size 75.2MB
SHA256 5a3453eb7aa170146c2806fc5f606039241f48f711f0ca1129a27be325ec6db4
MD5 ce82717ba6f2a47d127b49b5e84ae02a
SHA1 4e0c9590761fd6c8c87741bb7ffe8d35afdc8ea2
SHA512 1758eefce6a1074712eacc2b9bba460fd377c4e81257e0f1913574a8f357b367ea5ef01f0e83154f3bcc84d1ae989fd8b8ba86593ff88e1df42dfc636f9a360a
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_0.dat

Path F:\infaz_0.dat
Size 78.9MB
SHA256 6f2da285fe53910d7e98b93a78cbf783ac556ee20ed28fcbbec57020713fed1d
MD5 cbe50bc1c66e23de7394e33009b015e8
SHA1 3e86e1263c387286712afe01ee694e802de00bfb
SHA512 992d246cdcd6b39801f6a189fa3f999dd8f515be96b0157f6c7b91793e568e8c460b1ba034c89db7b98208eea54a13ae55924981d6292083f43d4554765ef76d
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_1.dat

Path F:\infaz_1.dat
Size 75.4MB
SHA256 a45db3d3134671c27706a53b08d47e4e357f8a5fa73aad74067f6301e0bf03b8
MD5 e43f41a4399e17b8a36bfedf0b959c27
SHA1 9438d5a99e3e25ea9a58fd85404b4f72ede5a74a
SHA512 991fdf48d025deb42495263504e5c6f16050624cee38e3f28c36499b2f566624b883906789c7d75d4590be79dc22c434e57d9559f8729b0c7419e490da7da2b7
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_3.dat

Path F:\infaz_3.dat
Size 73.4MB
SHA256 42d2398ce447356cab5dc1a4ccbb6cc00cb7161bec42d29b181fc8917761e1e0
MD5 69301e9a6836cf28f0510d1d22081b78
SHA1 8a2d5cb6656e9a07656a3ab611f23c93fcb71ce0
SHA512 201a2f9991382bb4805f6e77b65109b4135c1e407d196c94a5cdf9049510eff0843bd8014c87ac61f7feff48eda5c815f6aedc554f2c014c3e714bd67837059c
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_4.dat

Path F:\infaz_4.dat
Size 76.6MB
SHA256 c2af3d53e1b11d67374acb7815253bff317fcf83f8ae5085468d47292ae2b27d
MD5 d316085f63bdd74cc00308939890c457
SHA1 147c7b1ec9642bf59c407796293850f229a0baca
SHA512 4a9043afc0e20dabf469118c1f1408f567f48c95796efce3fef8a16ef5220b6d35d17dee116b8f477b77882612dac42f6195ff8bf5c50d79f4724076dc817a12
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download