hxxps://github[.]com/vvinlind/MEMZ

Analysis

max time kernel
838s
max time network
1356s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
01-04-2023 19:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/vvinlind/MEMZ

Score

8^/10

bootkit discovery exploit persistence

Malware Config

Signatures

Downloads MZ/PE file
Possible privilege escalation attempt 3 IoCs
exploit

Processes:

takeown.exeicacls.exeicacls.exe

pid process

4720 takeown.exe
4324 icacls.exe
4808 icacls.exe
Executes dropped EXE 1 IoCs

Processes:

Activation.exe

pid process

4512 Activation.exe
Modifies file permissions 1 TTPs 3 IoCs
discovery

File Permissions Modification
T1222

Processes:

takeown.exeicacls.exeicacls.exe

pid process

4720 takeown.exe
4324 icacls.exe
4808 icacls.exe
Adds Run key to start application 2 TTPs 1 IoCs
persistence

Registry Run Keys / Startup Folder
T1060

Modify Registry
T1112

Processes:

chrome.exe

description ioc process

Key created \REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Windows\CurrentVersion\Run chrome.exe
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
bootkit persistence

Bootkit
T1067

Processes:

MEMZ.exe

description ioc process

File opened for modification \??\PhysicalDrive0 MEMZ.exe

pid	process
4720	takeown.exe
4324	icacls.exe
4808	icacls.exe

pid	process
4512	Activation.exe

pid	process
4720	takeown.exe
4324	icacls.exe
4808	icacls.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000\Software\Microsoft\Windows\CurrentVersion\Run	chrome.exe

description	ioc	process
File opened for modification	\??\PhysicalDrive0	MEMZ.exe

Drops file in Program Files directory 2 IoCs

Processes:

setup.exe

description	ioc	process
File created	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\d58d3642-1dd6-4db5-94ed-b1731536532a.tmp	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20230401220636.pma	setup.exe

Drops file in Windows directory 3 IoCs

Processes:

Activation.exe

description	ioc	process
File created	C:\Windows\IME\permissions.bat	Activation.exe
File created	C:\Windows\IME\reset.bat	Activation.exe
File created	C:\Windows\IME\activator.bat	Activation.exe

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

7840 412 WerFault.exe

pid	pid_target	process	target process
7840	412	WerFault.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

Taskmgr.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	Taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	Taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	Taskmgr.exe

Enumerates system info in registry 2 TTPs 15 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exemsedge.exemsedge.exemsedge.exemsedge.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

Processes:

chrome.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133248598985670207"	chrome.exe

Modifies registry class 64 IoCs

Processes:

chrome.exechrome.exechrome.execalc.exeexplorer.exechrome.exe

description	ioc	process
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\NodeSlot = "1"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings	calc.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe10000000de49248a6d45d901c34726877445d901be0b1f46e564d90114000000	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings	chrome.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-4238149048-355649189-894321705-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0000000001000000ffffffff	chrome.exe

Runs net.exe
Runs regedit.exe 2 IoCs

Processes:

regedit.exeregedit.exe

pid process

5984 regedit.exe
9256 regedit.exe

pid	process
5984	regedit.exe
9256	regedit.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

chrome.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exechrome.exepowershell.exeMEMZ.exeMEMZ.exeMEMZ.exeMEMZ.exe

pid	process
984	chrome.exe
984	chrome.exe
5516	powershell.exe
5516	powershell.exe
5516	powershell.exe
5884	powershell.exe
5884	powershell.exe
5884	powershell.exe
6020	powershell.exe
6020	powershell.exe
6020	powershell.exe
5984	powershell.exe
5984	powershell.exe
5984	powershell.exe
3376	powershell.exe
3376	powershell.exe
3376	powershell.exe
1972	chrome.exe
1972	chrome.exe
4732	powershell.exe
4732	powershell.exe
4732	powershell.exe
1132	MEMZ.exe
1132	MEMZ.exe
5400	MEMZ.exe
5400	MEMZ.exe
1464	MEMZ.exe
1464	MEMZ.exe
2392	MEMZ.exe
2392	MEMZ.exe
1132	MEMZ.exe
1132	MEMZ.exe
5400	MEMZ.exe
5400	MEMZ.exe
2392	MEMZ.exe
2392	MEMZ.exe
5400	MEMZ.exe
5400	MEMZ.exe
1132	MEMZ.exe
1132	MEMZ.exe
1464	MEMZ.exe
1464	MEMZ.exe
5400	MEMZ.exe
5400	MEMZ.exe
2392	MEMZ.exe
2392	MEMZ.exe
1132	MEMZ.exe
1132	MEMZ.exe
1464	MEMZ.exe
1464	MEMZ.exe
2392	MEMZ.exe
2392	MEMZ.exe
5400	MEMZ.exe
5400	MEMZ.exe
1464	MEMZ.exe
1464	MEMZ.exe
1132	MEMZ.exe
1132	MEMZ.exe
2392	MEMZ.exe
2392	MEMZ.exe
5400	MEMZ.exe
5400	MEMZ.exe
1464	MEMZ.exe
1464	MEMZ.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

Taskmgr.exe

pid process

6640 Taskmgr.exe

pid	process
6640	Taskmgr.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

Processes:

chrome.exemsedge.exemsedge.exemsedge.exemsedge.exe

pid	process
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
6916	msedge.exe
6916	msedge.exe
6916	msedge.exe
6916	msedge.exe
6916	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
3968	msedge.exe
3968	msedge.exe
3968	msedge.exe
3968	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

chrome.exe

description	pid	process
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe
Token: SeShutdownPrivilege	984	chrome.exe
Token: SeCreatePagefilePrivilege	984	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

Processes:

chrome.exemsedge.exewordpad.exe

pid	process
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
6180	wordpad.exe
984	chrome.exe
984	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

Processes:

chrome.exemsedge.exemsedge.exe

pid	process
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
984	chrome.exe
6916	msedge.exe
6916	msedge.exe
6916	msedge.exe
6916	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe
6496	msedge.exe

Suspicious use of SetWindowsHookEx 25 IoCs

Processes:

chrome.exechrome.exechrome.exemmc.exemmc.exewordpad.exeMEMZ.exeOpenWith.exe

pid	process
3328	chrome.exe
2868	chrome.exe
4668	chrome.exe
2808	mmc.exe
2948	mmc.exe
2948	mmc.exe
6180	wordpad.exe
6180	wordpad.exe
6180	wordpad.exe
6180	wordpad.exe
6180	wordpad.exe
4600	MEMZ.exe
4600	MEMZ.exe
4600	MEMZ.exe
4600	MEMZ.exe
4600	MEMZ.exe
4600	MEMZ.exe
4600	MEMZ.exe
388	OpenWith.exe
4600	MEMZ.exe
4600	MEMZ.exe
4600	MEMZ.exe
4600	MEMZ.exe
4600	MEMZ.exe
4600	MEMZ.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

chrome.exe

description	pid	process	target process
PID 984 wrote to memory of 5000	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 5000	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 3288	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 1628	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 1628	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe
PID 984 wrote to memory of 4212	984	chrome.exe	chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://github.com/vvinlind/MEMZ
1⤵
- Adds Run key to start application
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:984

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd9ab99758,0x7ffd9ab99768,0x7ffd9ab99778
2⤵
PID:5000

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1768 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:2
2⤵
PID:3288

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:1628

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2240 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:4212

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3180 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:4192

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3200 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:2016

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5116 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:2232

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4884 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:1388

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=2468 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:5696

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4692 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:5796

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4744 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:5820

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5216 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:5836

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5216 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:6040

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4716 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:6140

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4784 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:1380

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5752 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:5112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4644 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:5160

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5852 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:2540

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5820 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:5388

C:\Users\Admin\Downloads\Activation.exe
"C:\Users\Admin\Downloads\Activation.exe"
2⤵
- Executes dropped EXE
- Drops file in Windows directory
PID:4512

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c title Windows Activation Fix
3⤵
PID:388

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c color 0b
3⤵
PID:1508

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo.
3⤵
PID:3036

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo This tool will fix your Windows Activation
3⤵
PID:4824

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo.
3⤵
PID:716

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo.
3⤵
PID:5476

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo.
3⤵
PID:3680

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo Made by skidaim#0607
3⤵
PID:3632

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo.
3⤵
PID:4476

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo.
3⤵
PID:3620

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo.
3⤵
PID:1824

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c pause
3⤵
PID:4912

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c cls
3⤵
PID:1064

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c cls
3⤵
PID:1712

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo Starting...
3⤵
PID:352

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c %windir%\IME\permissions.bat
3⤵
PID:5488

C:\Windows\system32\takeown.exe
takeown /F C:\Windows\System32\sppsvc.exe
4⤵
- Possible privilege escalation attempt
- Modifies file permissions
PID:4720

C:\Windows\system32\icacls.exe
icacls C:\Windows\System32 /grant administrators:F /T
4⤵
- Possible privilege escalation attempt
- Modifies file permissions
PID:4324

C:\Windows\system32\icacls.exe
icacls C:\Windows\System32\spp /grant administrators:F /T
4⤵
- Possible privilege escalation attempt
- Modifies file permissions
PID:4808

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c cls
3⤵
PID:1032

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c echo Applying permissions...
3⤵
PID:3664

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c powershell.exe -c $acl = Get-Acl 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform'; $rule = New-Object System.Security.AccessControl.RegistryAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' -AclObject $acl
3⤵
PID:5536

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -c $acl = Get-Acl 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform'; $rule = New-Object System.Security.AccessControl.RegistryAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' -AclObject $acl
4⤵
- Suspicious behavior: EnumeratesProcesses
PID:5516

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c powershell.exe -c $acl = Get-Acl 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP'; $rule = New-Object System.Security.AccessControl.RegistryAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP' -AclObject $acl
3⤵
PID:5852

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -c $acl = Get-Acl 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP'; $rule = New-Object System.Security.AccessControl.RegistryAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP' -AclObject $acl
4⤵
- Suspicious behavior: EnumeratesProcesses
PID:5884

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c powershell.exe -c $acl = Get-Acl 'HKLM:\SYSTEM\CurrentControlSet\Services\SPPSVC'; $rule = New-Object System.Security.AccessControl.RegistryAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path 'HKLM:\SYSTEM\CurrentControlSet\Services\SPPSVC' -AclObject $acl
3⤵
PID:3368

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -c $acl = Get-Acl 'HKLM:\SYSTEM\CurrentControlSet\Services\SPPSVC'; $rule = New-Object System.Security.AccessControl.RegistryAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path 'HKLM:\SYSTEM\CurrentControlSet\Services\SPPSVC' -AclObject $acl
4⤵
- Suspicious behavior: EnumeratesProcesses
PID:6020

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c powershell.exe -c $acl = Get-Acl 'HKLM:\SYSTEM\WPA'; $rule = New-Object System.Security.AccessControl.RegistryAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path 'HKLM:\SYSTEM\WPA' -AclObject $acl
3⤵
PID:5972

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -c $acl = Get-Acl 'HKLM:\SYSTEM\WPA'; $rule = New-Object System.Security.AccessControl.RegistryAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path 'HKLM:\SYSTEM\WPA' -AclObject $acl
4⤵
- Suspicious behavior: EnumeratesProcesses
PID:5984

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c powershell.exe -c $acl = Get-Acl '%windir%\System32'; $rule = New-Object System.Security.AccessControl.FileSystemAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path '%windir%\System32' -AclObject $acl
3⤵
PID:5272

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -c $acl = Get-Acl 'C:\Windows\System32'; $rule = New-Object System.Security.AccessControl.FileSystemAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path 'C:\Windows\System32' -AclObject $acl
4⤵
- Suspicious behavior: EnumeratesProcesses
PID:3376

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c powershell.exe -c $acl = Get-Acl '%windir%\System32\spp'; $rule = New-Object System.Security.AccessControl.FileSystemAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path '%windir%\System32\spp' -AclObject $acl
3⤵
PID:4912

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -c $acl = Get-Acl 'C:\Windows\System32\spp'; $rule = New-Object System.Security.AccessControl.FileSystemAccessRule ('NT Service\sppsvc','FullControl','ContainerInherit, ObjectInherit','None','Allow'); $acl.SetAccessRule($rule); Set-Acl -Path 'C:\Windows\System32\spp' -AclObject $acl
4⤵
- Suspicious behavior: EnumeratesProcesses
PID:4732

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c cls
3⤵
PID:4600

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c %windir%\IME\reset.bat
3⤵
PID:5488

C:\Windows\system32\net.exe
net stop sppsvc
4⤵
PID:4124

C:\Windows\system32\net1.exe
C:\Windows\system32\net1 stop sppsvc
5⤵
PID:2188

C:\Windows\system32\net.exe
net start sppsvc
4⤵
PID:4160

C:\Windows\system32\net1.exe
C:\Windows\system32\net1 start sppsvc
5⤵
PID:4620

C:\Windows\system32\cscript.exe
cscript.exe C:\Windows\System32\slmgr.vbs /rilc
4⤵
PID:5760

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c cls
3⤵
PID:4396

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c %windir%\IME\activator.bat
3⤵
PID:4188

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5808 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3328

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5052 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:964

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=4108 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:5536

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2476 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1972

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=4664 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:5884

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:5988

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=832 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:4704

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5584 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2868

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=3300 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:4992

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=3380 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:4692

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=3280 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:5904

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=5960 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:5800

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4872 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:5956

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6316 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:4776

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2640 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:3808

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=1108 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:1836

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4492 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
PID:3348

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5736 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:8
2⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4668

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=5128 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:5424

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=852 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:5488

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=5372 --field-trial-handle=1804,i,17538583653996150662,15066922292755253146,131072 /prefetch:1
2⤵
PID:5284

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1144

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
1⤵
PID:1164

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3760

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe"
1⤵
PID:2736

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe" /watchdog
2⤵
PID:5028

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe" /watchdog
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1132

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe" /watchdog
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:5400

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe" /watchdog
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2392

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe" /watchdog
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1464

C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_MEMZ-master.zip\MEMZ-master\MEMZ.exe" /main
2⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx
PID:4600

C:\Windows\SysWOW64\notepad.exe
"C:\Windows\System32\notepad.exe" \note.txt
3⤵
PID:2408

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
3⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
PID:4908

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:3504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
4⤵
PID:216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 /prefetch:3
4⤵
PID:5976

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8
4⤵
PID:2660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3636 /prefetch:1
4⤵
PID:4132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3648 /prefetch:1
4⤵
PID:5740

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
4⤵
PID:5256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
4⤵
PID:3632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
4⤵
PID:5356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
4⤵
PID:4356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
4⤵
PID:4192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1
4⤵
PID:2456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6656 /prefetch:1
4⤵
PID:1856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6672 /prefetch:1
4⤵
PID:4592

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6996 /prefetch:8
4⤵
PID:5576

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings
4⤵
- Drops file in Program Files directory
PID:3108

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff736fe5460,0x7ff736fe5470,0x7ff736fe5480
5⤵
PID:5432

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6996 /prefetch:8
4⤵
PID:3152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1
4⤵
PID:556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
4⤵
PID:3364

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6908 /prefetch:1
4⤵
PID:5304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
4⤵
PID:1448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1
4⤵
PID:1808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1
4⤵
PID:3784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5388 /prefetch:2
4⤵
PID:5112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1
4⤵
PID:1356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:1
4⤵
PID:5704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3944 /prefetch:1
4⤵
PID:1584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7192 /prefetch:1
4⤵
PID:4244

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7720 /prefetch:1
4⤵
PID:5172

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7872 /prefetch:1
4⤵
PID:2368

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8032 /prefetch:1
4⤵
PID:5584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8256 /prefetch:1
4⤵
PID:5700

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3940 /prefetch:1
4⤵
PID:4536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8632 /prefetch:8
4⤵
PID:1368

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8684 /prefetch:1
4⤵
PID:864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8868 /prefetch:1
4⤵
PID:6292

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:1
4⤵
PID:4888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3804 /prefetch:1
4⤵
PID:6652

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7176 /prefetch:1
4⤵
PID:5780

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9688 /prefetch:1
4⤵
PID:6948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:1
4⤵
PID:6936

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9404 /prefetch:1
4⤵
PID:7012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
4⤵
PID:3896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6988 /prefetch:1
4⤵
PID:6072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,3361851674135452222,3030023853429857935,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1372 /prefetch:1
4⤵
PID:7152

C:\Windows\SysWOW64\mmc.exe
"C:\Windows\System32\mmc.exe"
3⤵
- Suspicious use of SetWindowsHookEx
PID:2808

C:\Windows\system32\mmc.exe
"C:\Windows\system32\mmc.exe"
4⤵
- Suspicious use of SetWindowsHookEx
PID:2948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+download+memz
3⤵
PID:2404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:3876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=the+memz+are+real
3⤵
PID:5224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xfc,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection
3⤵
PID:5296

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:1216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://motherboard.vice.com/read/watch-this-malware-turn-a-computer-into-a-digital-hellscape
3⤵
PID:2932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:1188

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
3⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:6180

C:\Windows\splwow64.exe
C:\Windows\splwow64.exe 12288
4⤵
PID:7000

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
3⤵
PID:6608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:6644

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+send+a+virus+to+my+friend
3⤵
PID:6800

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xfc,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:6944

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=dank+memz
3⤵
PID:3508

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xf8,0x12c,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:6456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection
3⤵
PID:1920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5368

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
3⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of SendNotifyMessage
PID:6916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5772

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,5750678351712010219,17891179378381348218,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
4⤵
PID:2116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,5750678351712010219,17891179378381348218,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2184 /prefetch:2
4⤵
PID:224

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,5750678351712010219,17891179378381348218,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:8
4⤵
PID:2564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5750678351712010219,17891179378381348218,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
4⤵
PID:5064

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5750678351712010219,17891179378381348218,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
4⤵
PID:4892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5750678351712010219,17891179378381348218,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4876 /prefetch:1
4⤵
PID:4672

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5750678351712010219,17891179378381348218,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
4⤵
PID:1080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5750678351712010219,17891179378381348218,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:1
4⤵
PID:4328

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
3⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of SendNotifyMessage
PID:6496

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:7132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,8062017727564903535,2989041948986427321,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
4⤵
PID:2896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,8062017727564903535,2989041948986427321,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
4⤵
PID:6520

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,8062017727564903535,2989041948986427321,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2956 /prefetch:8
4⤵
PID:4956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8062017727564903535,2989041948986427321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
4⤵
PID:5588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8062017727564903535,2989041948986427321,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1
4⤵
PID:5328

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,8062017727564903535,2989041948986427321,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4876 /prefetch:1
4⤵
PID:6364

C:\Windows\SysWOW64\notepad.exe
"C:\Windows\System32\notepad.exe"
3⤵
PID:1364

C:\Windows\SysWOW64\Taskmgr.exe
"C:\Windows\System32\Taskmgr.exe"
3⤵
- Checks SCSI registry key(s)
- Suspicious behavior: GetForegroundWindowSpam
PID:6640

C:\Windows\SysWOW64\cmd.exe
"C:\Windows\System32\cmd.exe"
3⤵
PID:7144

C:\Windows\SysWOW64\calc.exe
"C:\Windows\System32\calc.exe"
3⤵
- Modifies registry class
PID:6340

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=skrillex+scay+onster+an+nice+sprites+midi
3⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:3968

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:2832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
4⤵
PID:4536

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2276 /prefetch:2
4⤵
PID:5584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3000 /prefetch:8
4⤵
PID:6056

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3472 /prefetch:1
4⤵
PID:2540

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3416 /prefetch:1
4⤵
PID:4524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
4⤵
PID:1380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1
4⤵
PID:5488

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 /prefetch:8
4⤵
PID:5632

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 /prefetch:8
4⤵
PID:3320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
4⤵
PID:3408

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1
4⤵
PID:3264

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:1
4⤵
PID:6676

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5992 /prefetch:1
4⤵
PID:6752

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1
4⤵
PID:4640

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
4⤵
PID:492

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6208 /prefetch:1
4⤵
PID:4776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1
4⤵
PID:7156

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
4⤵
PID:4608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1
4⤵
PID:4028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1
4⤵
PID:6096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6248 /prefetch:1
4⤵
PID:6768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1
4⤵
PID:5440

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6652 /prefetch:1
4⤵
PID:6632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1
4⤵
PID:7016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6508 /prefetch:1
4⤵
PID:5284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1360 /prefetch:2
4⤵
PID:6164

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6664 /prefetch:1
4⤵
PID:5128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7152 /prefetch:1
4⤵
PID:2808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6696 /prefetch:1
4⤵
PID:6724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7316 /prefetch:1
4⤵
PID:6016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6680 /prefetch:1
4⤵
PID:3016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7228 /prefetch:1
4⤵
PID:6220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7688 /prefetch:1
4⤵
PID:6824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7816 /prefetch:1
4⤵
PID:2744

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7584 /prefetch:1
4⤵
PID:6572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7088 /prefetch:1
4⤵
PID:7052

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7848 /prefetch:1
4⤵
PID:3832

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7836 /prefetch:1
4⤵
PID:1020

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7868 /prefetch:1
4⤵
PID:3644

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8248 /prefetch:1
4⤵
PID:3704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7120 /prefetch:1
4⤵
PID:6792

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8452 /prefetch:1
4⤵
PID:5472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8200 /prefetch:1
4⤵
PID:5280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8416 /prefetch:1
4⤵
PID:7072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8616 /prefetch:1
4⤵
PID:3180

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9024 /prefetch:1
4⤵
PID:2456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1
4⤵
PID:6532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9384 /prefetch:1
4⤵
PID:1352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9260 /prefetch:1
4⤵
PID:3552

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9148 /prefetch:1
4⤵
PID:7068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9744 /prefetch:1
4⤵
PID:4356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9944 /prefetch:1
4⤵
PID:6892

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8428 /prefetch:1
4⤵
PID:2316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9732 /prefetch:1
4⤵
PID:3680

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8464 /prefetch:1
4⤵
PID:2456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10676 /prefetch:1
4⤵
PID:7420

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10592 /prefetch:1
4⤵
PID:7504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6640 /prefetch:1
4⤵
PID:8136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11188 /prefetch:1
4⤵
PID:8168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8684 /prefetch:1
4⤵
PID:380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11108 /prefetch:1
4⤵
PID:2284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10720 /prefetch:1
4⤵
PID:7212

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10516 /prefetch:1
4⤵
PID:7300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11580 /prefetch:1
4⤵
PID:8016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11368 /prefetch:1
4⤵
PID:8088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11116 /prefetch:1
4⤵
PID:6624

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10584 /prefetch:1
4⤵
PID:7660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10468 /prefetch:1
4⤵
PID:7300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11832 /prefetch:1
4⤵
PID:3844

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12092 /prefetch:1
4⤵
PID:7216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11712 /prefetch:1
4⤵
PID:1040

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10776 /prefetch:1
4⤵
PID:6996

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10472 /prefetch:1
4⤵
PID:7648

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11728 /prefetch:1
4⤵
PID:7724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12048 /prefetch:1
4⤵
PID:8088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12156 /prefetch:1
4⤵
PID:7668

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9940 /prefetch:1
4⤵
PID:1980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12456 /prefetch:1
4⤵
PID:4656

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7856 /prefetch:1
4⤵
PID:8736

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12452 /prefetch:1
4⤵
PID:8836

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13172 /prefetch:1
4⤵
PID:8476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9028 /prefetch:1
4⤵
PID:9096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12604 /prefetch:1
4⤵
PID:9208

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12608 /prefetch:1
4⤵
PID:8300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7188 /prefetch:1
4⤵
PID:8540

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13316 /prefetch:1
4⤵
PID:8824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13624 /prefetch:1
4⤵
PID:5284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12988 /prefetch:1
4⤵
PID:8436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12180 /prefetch:1
4⤵
PID:9140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13484 /prefetch:1
4⤵
PID:6404

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12260 /prefetch:1
4⤵
PID:9024

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11280 /prefetch:1
4⤵
PID:8552

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10844 /prefetch:1
4⤵
PID:7916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13596 /prefetch:1
4⤵
PID:9044

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13344 /prefetch:1
4⤵
PID:9596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13408 /prefetch:1
4⤵
PID:9688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1312 /prefetch:1
4⤵
PID:10148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13604 /prefetch:1
4⤵
PID:10236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11480 /prefetch:1
4⤵
PID:9004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14004 /prefetch:1
4⤵
PID:9868

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13352 /prefetch:1
4⤵
PID:7928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13892 /prefetch:1
4⤵
PID:8588

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8400 /prefetch:1
4⤵
PID:488

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10572 /prefetch:1
4⤵
PID:796

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13608 /prefetch:1
4⤵
PID:8472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13820 /prefetch:1
4⤵
PID:7072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9028 /prefetch:1
4⤵
PID:9660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
4⤵
PID:1704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13456 /prefetch:1
4⤵
PID:768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12188 /prefetch:1
4⤵
PID:7072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2268,7517330397378172690,17846721509019480482,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1.25 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=14328 /prefetch:1
4⤵
PID:9572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
3⤵
PID:5880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x128,0x12c,0x130,0xfc,0x134,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:1688

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
3⤵
PID:6672

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:556

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+create+your+own+ransomware
3⤵
PID:2068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:3660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=my+computer+is+doing+weird+things+wtf+is+happenin+plz+halp
3⤵
PID:4632

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0x120,0x124,0x104,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:2288

C:\Windows\SysWOW64\explorer.exe
"C:\Windows\System32\explorer.exe"
3⤵
- Modifies registry class
PID:6352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=g3t+r3kt
3⤵
PID:3724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5972

C:\Windows\SysWOW64\explorer.exe
"C:\Windows\System32\explorer.exe"
3⤵
PID:5244

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
3⤵
PID:6664

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:4236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=best+way+to+kill+yourself
3⤵
PID:1584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:4800

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+remove+memz+trojan+virus
3⤵
PID:5960

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5248

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+remove+a+virus
3⤵
PID:6268

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:4792

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=montage+parody+making+program+2016
3⤵
PID:5332

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=half+life+3+release+date
3⤵
PID:6432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5220

C:\Windows\SysWOW64\control.exe
"C:\Windows\System32\control.exe"
3⤵
PID:3644

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=internet+explorer+is+the+best+browser
3⤵
PID:5932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:772

C:\Windows\SysWOW64\Taskmgr.exe
"C:\Windows\System32\Taskmgr.exe"
3⤵
PID:2156

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+send+a+virus+to+my+friend
3⤵
PID:6012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=stanky+danky+maymays
3⤵
PID:6312

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5852

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
3⤵
PID:2912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xf8,0x12c,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:4980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
3⤵
PID:5868

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection
3⤵
PID:5384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+get+money
3⤵
PID:7348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:7360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://softonic.com/
3⤵
PID:8068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:8080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=stanky+danky+maymays
3⤵
PID:8152

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5920

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=my+computer+is+doing+weird+things+wtf+is+happenin+plz+halp
3⤵
PID:7848

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:7944

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus+builder+legit+free+download
3⤵
PID:7860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5988

C:\Windows\SysWOW64\Taskmgr.exe
"C:\Windows\System32\Taskmgr.exe"
3⤵
PID:5204

C:\Windows\SysWOW64\control.exe
"C:\Windows\System32\control.exe"
3⤵
PID:7476

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=bonzi+buddy+download+free
3⤵
PID:8020

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://answers.microsoft.com/en-us/protect/forum/protect_other-protect_scanning/memz-malwarevirus-trojan-completely-destroying/268bc1c2-39f4-42f8-90c2-597a673b6b45
3⤵
PID:7260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:3460

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://pcoptimizerpro.com/
3⤵
PID:5412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:3748

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+send+a+virus+to+my+friend
3⤵
PID:8664

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:8684

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=skrillex+scay+onster+an+nice+sprites+midi
3⤵
PID:8316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:8388

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://play.clubpenguin.com/
3⤵
PID:8976

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:6192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+get+money
3⤵
PID:8608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:8616

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
3⤵
PID:1940

C:\Windows\splwow64.exe
C:\Windows\splwow64.exe 12288
4⤵
PID:4288

C:\Windows\SysWOW64\mspaint.exe
"C:\Windows\System32\mspaint.exe"
3⤵
PID:7620

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
3⤵
PID:8956

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x120,0x124,0x40,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:3280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=vinesauce+meme+collection
3⤵
PID:8760

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:8780

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=internet+explorer+is+the+best+browser
3⤵
PID:8572

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:3132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=is+illuminati+real
3⤵
PID:9504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:9532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://pcoptimizerpro.com/
3⤵
PID:10072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:10084

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=bonzi+buddy+download+free
3⤵
PID:9516

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:9576

C:\Windows\SysWOW64\notepad.exe
"C:\Windows\System32\notepad.exe"
3⤵
PID:9292

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+get+money
3⤵
PID:9524

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:9764

C:\Windows\SysWOW64\regedit.exe
"C:\Windows\System32\regedit.exe"
3⤵
- Runs regedit.exe
PID:5984

C:\Windows\SysWOW64\mmc.exe
"C:\Windows\System32\mmc.exe"
3⤵
PID:8604

C:\Windows\system32\mmc.exe
"C:\Windows\system32\mmc.exe"
4⤵
PID:2580

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
3⤵
PID:9332

C:\Windows\SysWOW64\control.exe
"C:\Windows\System32\control.exe"
3⤵
PID:9280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=batch+virus+download
3⤵
PID:8948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:8532

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+2+buy+weed
3⤵
PID:7408

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:8656

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=my+computer+is+doing+weird+things+wtf+is+happenin+plz+halp
3⤵
PID:8200

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:9852

C:\Windows\SysWOW64\regedit.exe
"C:\Windows\System32\regedit.exe"
3⤵
- Runs regedit.exe
PID:9256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=what+happens+if+you+delete+system32
3⤵
PID:9392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:10148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=the+memz+are+real
3⤵
PID:7656

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:5496

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=how+to+code+a+virus+in+visual+basic
3⤵
PID:9232

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:8308

C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
"C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
3⤵
PID:8168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.co.ck/search?q=virus.exe
3⤵
PID:10184

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
4⤵
PID:9992

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1768

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2456

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1364

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2d4 0x3d8
1⤵
PID:116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5232

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k PrintWorkflow -s PrintWorkflowUserSvc
1⤵
PID:6288

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1772

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1504

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:388

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4872

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3324

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5008

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
1⤵
PID:6016

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:6236

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2840

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffdaa6d46f8,0x7ffdaa6d4708,0x7ffdaa6d4718
1⤵
PID:896

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
1⤵
PID:8992

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 440 -p 412 -ip 412
1⤵
PID:6688

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 412 -s 4512
1⤵
- Program crash
PID:7840

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Bootkit

T1067

Privilege Escalation

Defense Evasion

File Permissions Modification

T1222

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000004
Filesize
44KB

MD5
4fbbf22f7c282962ddf375053c5cc23e

SHA1
940ff57a8da4b32e8383236dd49b0298a3226b37

SHA256
f8e68bb37b25f8e41bfa51d72050ae6f4a9ebb9664da7f150fa1ba81c94d8c4b

SHA512
f6603de2b7796268ae334d47fcad63cbb10e9528c4e41d9522a8a9129ec72838f58efe21808aa09dead2a949d34edd98423dc86b6e975f1b8d4a59277ac7b7f4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
Filesize
31KB

MD5
a0c7fdef71282671fd5d7720cf3ba971

SHA1
107ad0c5d495278f21cdc2ca16f1c00b88b9779b

SHA256
de1f5c89b956957828bd9a11c028be545b34330e82469edde7e200c29df10cf1

SHA512
2b1dafb47b47519a9ac91fa34ac799330bbb589587450b5eb61af57e6512d3c50d27a526735c08b9959f3a6e8fa4eaf0c1b978c6b0b0ee3cabafdad19812e229

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
Filesize
36KB

MD5
4f584941643227707fda008dec37c6c1

SHA1
10cf8b1d3f7ba0483f80a8acc0d0dcef93123fa2

SHA256
4b799fd2818bf5342bfe0866f444973ecfbb9e3fef5c74bb5100d5d05610d0a6

SHA512
c8bdddad550f86444e676aeb50b0db80872a0cb36631b90ddb771258b15ac9b4aea0c42026d5d3c90d4394f8c088c9c086b40be80b49ff2228c576ef7bbeda57

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
Filesize
31KB

MD5
47bf2cf65e7289435bb26589255bc9e5

SHA1
56b64f89d273c3524302f2159e7dbcd4b69f2a92

SHA256
f93e24485582b71f77bbf095c871db7be3464abef9abbfaf15b47eca09edb7a9

SHA512
29bd1174cdd2f05b65f41ff83865dcf8d0d0e2cd48527fdb821dcc84776df8a0f74626616268a932b16e8aa48cb83997231ff01f82f840782fd76b234cc458be

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
Filesize
16KB

MD5
23607149ede688319bed9d4b4a519ec2

SHA1
d5760abf4b46395b9aabef6b316467770169ef69

SHA256
359bc28f70f359efd5f3358800d379ad74ca8d59a334a11fb35408178544d356

SHA512
52d096e2e75256de6335e18b448cca7f4dcedb568daea70dec57df9c7ebe7049578c3dde5553265d9f962bd5a79cbb8ba55631f9f8367381bc92aa3af9ae7f7e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a
Filesize
19KB

MD5
39b3153aec1389748d7aea7b1ecbffd4

SHA1
f9840264c67a5d7db64b4beb7f3adab18bf4171f

SHA256
dcfe833b312be0b1af66e043b3e165f399a70c435200d0bca4f7cd95d7999531

SHA512
72aa2325b03f7f0ceab345cb300b672382cfeb6b10d1cacaf98d8c9704ce4993d14538fef5d0691e10e95562246d6de6d82c73781a120f7d19e9a1ff201c867e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
Filesize
62KB

MD5
6ca9f3cf76c7d15e0007f5f088b2a7cc

SHA1
6c0992d34b8ce73d482ac0965b8799b6751700dc

SHA256
b5d5b5cb7439bde407fc03db845275e118f54494c56874a92e58e1d821a0c8e9

SHA512
9d48abba080744c63e604a72629f1daa399fb90f5216ba708ca992c705e607bbdbd510a698bd7b8982718e40d17f3fd49b1c26570506022b9120fb8c269520c8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
Filesize
1KB

MD5
dcf7c8ca20d57db9575ff903f8cf1025

SHA1
3d02ea280584ca8e5c1ffc81995b4aabde1da0a8

SHA256
37a890ff75c137fcc97a982898155e34a9f1f07d7d35362aa76ab90091a8275e

SHA512
c874a9c522f25314ac18db443a9e99baca0b1c4a6e5217da6fa059372593cbd6c5fb4e378207a44dd18947e72913f46036ae2da93ff0b33a79b60cc76943e8b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
baaf93b02fb182fdc4ce8565c2a18f3b

SHA1
f81321d66ba68af56a560c8f9b880d8665e8919d

SHA256
80066de43481446fc3569d17152b47be7f3438ccfc18c368302b52d43f5e0a5b

SHA512
29bb0eab70697175f9043103e6b9dbea2dc535f1507ae01c2788477b0a3b0fd51b7b982804c676081cc85ea99bc749e2ce4a24b15f73e5737042e5441d706ac1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
1KB

MD5
00792a1aa8e935a1fae74d2fd8923716

SHA1
6b6f6b92c6130f405fe0c8e1ba84480be04fe00c

SHA256
39cbb3ac48cc82b1c44e25f8c5c9c6d4313824a136e666e3c268ff24634c2e5e

SHA512
fdcd27098efd199c5e76416818fef046c7209f8e9a3bcd5a56732b758efa8ff0e45e51801ce5f65ede18ad2357d0b10ea62fc19d044e67249de9ded369758350

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
1KB

MD5
97eed096322fe6ef7407fb641beb99ee

SHA1
7d62a87f0132db2c2520b3a6b8662e82a5a8ecc5

SHA256
73c3c4c6ad345a7a6368ea9d5ab703654cce979a58df0141ade52a80dd645e61

SHA512
059caeb65cd7592eb8820d539c20e5c936f2a4b4e4f21c17ef2f14cd4df0207dfc4d37c7406a06ef7435a79e2f9ed1a09fd1c93fce3f8d8a89263fb2f0451e88

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
2KB

MD5
667592702e86770e71797681d07cb288

SHA1
15edcc989abccc51369f14d4796445dee05d52f9

SHA256
fc49092321611c46544c299240af66b3097d9b7c193c8fcb46c350ecfd439ce7

SHA512
402ab2e9fda31f513f76c2f98493367dfb8e76e813f01048e39e30feedc17c7653f1dba7c9679742b7e1c038e5883bb029f0e76d5d739ef819740bb5ed0bf3e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
2KB

MD5
76d4b1fef5ce04cf74738e560f719592

SHA1
2b1f9a5106e0a18ecaa348ca42af0900e50b99ec

SHA256
c42490942adf33409269b5ca435854c28bd987132093356484ccd03356f73574

SHA512
3a6c1c7e8ba3f2758df8fb133e47e5c92a9211711b4ba7a721544edd02204f3e27cb216f7859db45ade0d7f67bf659d364d154075be5ec0049e657c5c1d24e22

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
2KB

MD5
7d2d9ff0bc95559d1d3f00cbde53827c

SHA1
52792c293fcf1132f87e2d91f3b555927acb607d

SHA256
64eceba05a2a1f3daaf50f3653000bd767ef474140e8b824975878afad38e8a1

SHA512
bddd04db8b7c9e381bfcd5b69527194194da6b548f2c2423aef7d0ba2880e9c587d32635d61e44b3c8f9a46c6cefd6c3eeee0763c37262b06e920aaaeb541ecc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Filesize
2KB

MD5
97123c40472d46faeae2b0ac2f53d008

SHA1
eff001f907a4359afd7ccb98b1714d069578baf7

SHA256
bd67b4513ce5b3634944445b5748a71851d2e40523b917eb9545ad5a443450e0

SHA512
45c36f7a797cba015711188d0986bffd0f3f216feb5024503a7f8a9c28eef71337608b33a6443eb85f05f5a3ad5722bfbacd3b9c302016b380399a1fcb92866e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
dfbbcb4f79fc80a3634f48b4ae7693ad

SHA1
341336ded53e181aa88126bcac4c7a1d48e5f88f

SHA256
33f66c2940cfbeeb0f6798816172d2d907c9bc7c33f5d341a46796f5e78a89ae

SHA512
c56736343163d3d1b3e595a966cfdcfcdfd058ab86fc9e27109b6a1b173f3294bc421383042d25a5bfb0b6bc05d718c9573959a9b5429233ba6d09d07a378900

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
aa60bc0311498795112f71c18d10d5f6

SHA1
a0657d2cf98a3e5de6b0bca97a8553071243aa56

SHA256
fb436c0fe9b7270028f76849e25f2cabe539b275e18e7cc0f86164daac5ebd2f

SHA512
c5dde78e3dde0898293ea5c95197594a4de869bfa5e1ae5b610e9118a5317647f3fbad498bc65cd18722e076044dd24802309b9020d3dd5faac37c534f991fe9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
c32dd1aa5c951baaf16845707eb3ae2f

SHA1
b826bae603c9663bb6a2251608ce1607099abb14

SHA256
b6d59dd3939af834d576d2657368352173e90221283945aa6d228686e3e39303

SHA512
65fc274d89bd1db96464a3fad6c28015e2da0fe47c9d458f01306b1061983d9991762936c807c126c5247e49d6dcc3b2fc95678a0a2f9b8e11fbb3e945d99a8a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
aa4bbb1713698f8b7493f8c46a081778

SHA1
bcd259c66399a967d49b0bc27e5350215b29fa85

SHA256
7307abc0d2af749f81baafd1dce58fbb048f69816bd368b94df3c069a3043147

SHA512
5a8c15af1d81f41c95e44a1f88d2556cc7459d12f1f9347f96ed6605069d64a13dad4794019f5cb6b1c85efaa3da66f0af208b17015963fcd6d32e525f230dfb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
675c210cc2be35d5642e60fb3c067b03

SHA1
4052133d31f481c88236fe6e52d50e005429e4bf

SHA256
fefd0b132a7fa78ae95ddbdc884aecff5ca4eeea0009002c8ced4971c1e11a98

SHA512
8c42fd429678a512a87d0a31736fbce8cee00614fb73c43d4d5162ba851386dfb8132ad50ab170be5f205ca663a44b4215ef02717d43912699c3dfed4aff933b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
e92c94a9d4c031ef7b2daac51b9acef6

SHA1
a5e23a7d90597f7f91650ce05ccaed6c71fe66ad

SHA256
6753b61cd281a123f7e75ceaf2bc37fbceae3fabe6c27479cbf2b3f010ea8fa1

SHA512
e00a7f6c58b3ab2c6e1a4445a476c64f0ab871528f325c30d006d228d28dba1e573116f686f2b0340caa2ed4d2c4ed4ba377a4a97848033ca67c020b5b806982

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
369286fe31084615d1d6603e030e7001

SHA1
d3043ab54e18c4d8089593791b33ad195bc865c2

SHA256
0f65e208c156ae5b21a7c441eef0cff2b01c04df6a37b480b93a1ed9727bbe4d

SHA512
5a24b73ffa7675bff59f2277bcdc96bd5045a6c5aa14b87e411a8f00723123d7a97488d6e17bcdcca55250b06fecb6f4eb5c1cf2dd6c1fc99fa5347a48fad673

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
80515a8655c1ef057a20148a2540695b

SHA1
c86a164b8d85c789e6c39ddaf3ffd3e0426070da

SHA256
b3d947d95621eccd4cf8460aa2a314055e924dde9669bd027111ddbf0add2677

SHA512
87f3356c07f92fcd1decefcd1d341875d0dda30662a79b1b50f57ef1d7ec7eda5195bed86a734549a75c98242e2b7427bae312d2da06fe874f21610fa50dc38b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
5b8956a44e7195ffdc0ec3e6ec61e2ce

SHA1
5bc27c1352f79e6a976a06bd15b5fb950e9e62f0

SHA256
95b7b1d4c2d2a064f4b9f1dfa186757a0e358a67d6e75e907177394846527de4

SHA512
613a6a3f74a4ac7e9950feda18812684df958be72d89512b85a9b583e2323d297c5ad10f1c8c763409bb0809f0cde7f8668e100856bc1b5e620256c0cea45de0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Filesize
1KB

MD5
3d8fda66622d0ae36b8e13f23aae087a

SHA1
606810e6f4bd1e8de08770abd4ec4bf3c47ded10

SHA256
a6d15d011ebb8f2ab3bba2f529969b4d1816e8c2924859ecd958d6bbdf17fca6

SHA512
d67f297f27d6a535550cfe6d5bca214367799bd3fd03b6604fae4a7a8e09961f684b42dda333f422118fe8063f5853e238c8058d9daa196a0ab30d4acebfc75a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
0a4517a4be1becc03e472c9d50b39a07

SHA1
e484e6e489c8b8ab73646cfc147b6aef69cfc26f

SHA256
befe44eb58fa8f46ce4c592297d674e7cb0b6146dc6d26c0af63aa76bda9280b

SHA512
3629a3cb0855da10632dd2b9689afb327fca3e73dbae2ec4177d3c9a0f81cb793fcbaa56b2bb7d5a2f09cae09b9c106a966ab22bb7fc462a55efe68e93794df1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
5aefcd4542746a2d354717a99ecb9bec

SHA1
06aaa4209c1bedccab6353a97ba3962720e4789b

SHA256
8595478265376393708c389ad84662b343a81fa964c8fc38ad36dfeaad64f53e

SHA512
c147426f9153e47178be620c66c0bb31e3e30d1033d637c0e73d9a8dcf65a9ffc160f3a0b422848299492e7a253846ccbddf9531469ec16a665bdfc31b1e95f4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
e259bc14d0fa28215c7804441f6962da

SHA1
6edefd5092a358db951ab721f7e292c8f56fa51b

SHA256
a549700e26a87410a9f324510af72088a16bcbfffc464c452529dfa15199d576

SHA512
a3398effd65116a52ce0393be8181edfd63b1738bdfb51d6bb8b94fc4753233c324b6c494c58ded43bbf45185bbdd6c11c0d577d73cdfd1a9d7ecbe1e37b75f2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
42157e793f042c207a2d7c0196005817

SHA1
c23de6f4a4f8c7fe2c67d526e0176441e7d97924

SHA256
d5b9b11a238ac6a521e5c6d55ba71f68ad495d65e8db86f18740b8db03a658f3

SHA512
dd49dd776d37551e4c61e419153cc4c5056b983a3b792a085866b8debdf77d8643511ff4a9b5948e077f25903809fc9d9f7212bb04958acd41c714108b45bcc9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
0ff14a7fe8b1d46937abeed083185c7f

SHA1
bf8138829766d81dbaeab53aa2e2e7aeee735214

SHA256
df25f19a5579538e7c2d837176caa9d24542314b74d5335b7ad0ce031ee157bb

SHA512
5dece92b30b8c2f62c5fa3e79b52ef38750e9fee5e7f7b4d893a3c58f547ad93bfd38dd6e04d9c81fce10eb0a551412281ee1c58e5db6226aa986904e43a65cb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
aa635fc098706faca79daf78b4f33f8f

SHA1
d393f6e52adf7e971582889c88f467118b169487

SHA256
ca3446f9eb38b0f90fa0a543cb15e9a168a0137ec14f5371b30fb58685ab4220

SHA512
f928cabafbc500332a23dc44321507da18dd9a09ad550922d0a0f26ba48717c095b0b8f9d66cf2dd8371bb31a9029943a2fa94ff0529c712c363cc2564206ed7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
37801ed882ffb410e9f5c7e901346886

SHA1
d547b7cf6b2acbeb58bfeea5778956f2acbe69d9

SHA256
d612aa044526712aba16623d22d01e6512eb7524b5ab406a6b6267fd3c36b831

SHA512
347a09caf0d8cfc95f9741c3fe7d9c8b325c5c3d93dea25f1eb9849305b5bc152ba47a01e01006b5a000c2cf6debea18153e98ca82f56f279cfc6bf94660b7f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
5KB

MD5
dc9903235230126f3f4ced15ad4f5dcd

SHA1
bbd53e1fd5f65126c11064b9de6b879d507cee9c

SHA256
f7590c9026a3e11fbe3ca5bedaa18e4c6bf0753af41da3deeb3c1ffed7d69b60

SHA512
199175e26af8e546b1a00b8af20174f902e407a4a65a475f9598a7f7f25bba613a7e1b57c17aaddf420a7cc8a5d31f35bc3a64f5efdf311ef64eb4f409cc4f4f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
5KB

MD5
8d3e6529a028927b36357a247dd73aa2

SHA1
d75682dd7bd46085bd80cf3d772bdc9d83a36a0f

SHA256
6124683c6c08e115eb73694e1ce4552248398abdd55f86067bcccbd65ba36c63

SHA512
240a752bc011ee28229de45642a92bc28f3e63ae3078377b072ba39769231cd1e548a9b813c512104a712b0c2cf09537c810d67cb30e904326d62828ea393e91

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
5KB

MD5
91e09cc7addf09df1a7ee09eb31f8445

SHA1
215d00a089a23dd42e3940276f9f5a97acf603fc

SHA256
a49c3dc1805309a0326acffeb773622ead1409a5172aecee469d3c73f6625827

SHA512
136362efe1772e0606ff5e920451e24edd31cc277e49e602097cb016a83e7fae756d4d41c2681340fb9d6cd18a6c6fc60789d1ebd20eab38bcda88975eb81c9c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
5KB

MD5
d1d35b44869d56824f235921c47d9641

SHA1
620e8b9516f8d7d42557e0b5d32b056fe7f7f5c8

SHA256
ed0edb430444cb705499d60fe787fd3111733a7b68ef4dccbc4dc1d8389848cd

SHA512
26500fe8bc8070a67250a89bd3c85dd481db21568fed47d5e5d9d51d15d3a254268b7df3f7e5c80226d7974aee1e22e9b0373335c8e4a14d5de9c144c62afee9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
5KB

MD5
0fcf3f9a3ca6f3a0b1bfaa70a8c86025

SHA1
5e77592ee0133873c09d0a6c569817fd8582b934

SHA256
d06baf12f8d6f62a25841d607b05cfb62c7bb80de5778f71692404f7352177b6

SHA512
a171474f9b71337524898ad693a05aa0126fee226b32b7d0def59c5be02c686433aa6db8e0c0bbe5a8e31ebfd4d0f168b07b1a4b512fc4f366b6248bb7c10691

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
5KB

MD5
59f25390d49fd8e6c414ec6b77407e67

SHA1
88919472ea1ed30018a9a58c2f52017a78dce33a

SHA256
69dddf76718a48b7bd15c752bbdf0b46c1be1d07609f17c7c77ec6afc7077fed

SHA512
55f326f87f23711474caedf407aed974e15cab81accf188bc1a1a460e186b79ba0faee7b6d531b8e73e69bcd5afe8bcbdfb6200df108d34e37a0dd24d791df7c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
5KB

MD5
84f63ba41c43cabc8ab0f7d87336ba11

SHA1
c9a9983314ebd1685e3e96278d0218a6b74d0ea9

SHA256
eca380c924c4e10f381436484edcce31adfa359920ff8686198a215515fa5516

SHA512
24021a2b2a58b51984e5b6928b32b7da6a5acd7c300de097155019dd2d46c6d64a43ff3b1afe8e66e301628e167a8bf46cacf267a605a0945dde8939fc4ffd88

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
3ae56bc7d78a4139e0d08617ff9fa105

SHA1
4e2e3b78087243f4ae339a82f1b8e6f0dcef6eb4

SHA256
3024d635b4e6e608d35b71950e5c3f5083aa1c33bca646206a797175819d82b5

SHA512
25934298f12eaf00b19711cf1e49dc136b21eb83f186d7f02e93dd9742823a5403fca39bc09633a7294e1c9b341a11d6fa0131f2f2b38b518dade612a31927eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
4KB

MD5
d7856a14e9ad434e4ded88b91ac49666

SHA1
aad313d1f5dcdcc42dae226344991b457886f46a

SHA256
844e5a1bed129a1a5840691eba2116f61e1fd9c69e5ba267cc5f349e0edd8c0c

SHA512
9299d037bde02dbef73b54f5a9a345b4bab1fe9d00a71921da0ca29d53113a5564e5948e6f8ea5c658084154f1b6c50bd56cf934ee4920297a994c05b343b687

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Filesize
5KB

MD5
9a91799975758d12c65a832d9598add8

SHA1
69c91e73341567b5aa762134f1256fe48e08db41

SHA256
b2ff9f607674e326f39bc7c47855f64e25c7fafda89ebdb363ae2a98e0178d10

SHA512
f6981200f89b46cec869abcab19c0fb9e309a5afd49630a579d655307805f0f9f086bc36512678dcca2967ddacc60b4791b976a8d7839c2c5581d9c1421f1e37

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
173KB

MD5
907421519128d66f0149a4ace6d331ec

SHA1
167392c55216dfced7f0d25e1f3a918449d9bfa6

SHA256
f36ee71226cbb1a032545e386560676364a95817d01c6bb77c1e1f3bee32b010

SHA512
a6c773bdd52e7615f85d89746876b1d35f40a365c9aef6064948eb398ea5ddefb89f484cf3ec2598a675701342ea4cfdf625c070f329c088ba4fe09e5cb0d1c8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
173KB

MD5
85e8e6ae8cf682195b82a8d72b64a953

SHA1
7b273e7eba22f107a3d3e93fabf850fcb35ad3ff

SHA256
0beea73796f96eea2e0a31c92d2be36c9bf75fb7ab1aa7e46a53db0df191f518

SHA512
05e1729ebf808b061c5e7a0c82454d82be9d5ba95fe9d18cbe5ae4140f1df0a942f7b5f21b15f75f2e41d0f907af0bebbb8b09fc4b2a452e512c6c9657cdf7bc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
173KB

MD5
9c7c27a724bef7a7609f22cf0cfb0573

SHA1
1d90a1021ca9ad3bf1c46a4d46ea47d02f8e5710

SHA256
45526a5170c0e57cfa7d9ac0ff95362904d90a06157fce866136eac20af9807d

SHA512
2ec3e9d8db2f4f3d7e6886b4c50750c5867e8cfd93198bb30a8c3c0727133a87e6491a370eb892a03fa1b99c5ad780328d5f9d857d07a909ffa8f303ab3b4a24

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
173KB

MD5
1494531313c1470bf0a3be51e2db006a

SHA1
b70bced7ed6334dc0c7948e286ac6481b40ccfe8

SHA256
70e9897ff3cb780cb3478470c7816f937a46179029ba15e152bbbd10f37186ca

SHA512
09bc3bad325bff4d142009bc970e6fa66a35374142c7994575b2fcf3985c5076ff108341a00d1a213511367a3247e854689ed9b3c330889f01156ac7da080b5a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
173KB

MD5
4e5ce5ca6be8c866552fec7c4ba284eb

SHA1
f6eed967d31eb1ed3d96e11e79926f877a4fe995

SHA256
8c57244c2c874d0a1a6c8909078e233234921bb040dfa3c4ff008bec9a3958a8

SHA512
58a063a588030111481914f826740fe0d9ced1aa9f234aa113ba24ffcaafaf89bf72afabb7fb24d9ef935e574a1d2f30fd64b814a281ba11066c4d1a76e712b7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
173KB

MD5
4e5ce5ca6be8c866552fec7c4ba284eb

SHA1
f6eed967d31eb1ed3d96e11e79926f877a4fe995

SHA256
8c57244c2c874d0a1a6c8909078e233234921bb040dfa3c4ff008bec9a3958a8

SHA512
58a063a588030111481914f826740fe0d9ced1aa9f234aa113ba24ffcaafaf89bf72afabb7fb24d9ef935e574a1d2f30fd64b814a281ba11066c4d1a76e712b7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
173KB

MD5
34c9a0ed5b9c9a60cf2e695d54b79130

SHA1
223bd55812db3c556f00a967ac830fd2efd0c230

SHA256
1773f97314f1a2197c5f5d67e30a272f52a9d54157f1a4eddae247fb4babf28a

SHA512
7d22b27fa5b334edccbe2d31ef83e0f4ee2fb5f06ad1ba160c888a838c1b4c4d5fa0931837d7207ea162e11ccfde1f5b585dcc510b01ece5060d0270fb47a2fc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
173KB

MD5
6a9eb238240a08b70674561dd8e3bff2

SHA1
abecc2fd295e63f621f25674014c0fcc054abb94

SHA256
31b014c687197c87dd5abbedf8dd5c35ca6f16466ba3d7d26dd3f15c57208b77

SHA512
f018c5419c5a770049a5ef9b150e06b27bf7c89c3b468f02a5517b3ac2ce9c124268734ee2660670cf4090e3ffcf0f7ca925e60a591ad3edaa793627e10e2a8a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
173KB

MD5
0391cd5f7aef209b101f8260e1638ca9

SHA1
ee3f14908e5710292b898f10eca51eddbf78f248

SHA256
cf7573e64843dece46ee341223e8974c854c8a24239d7f707727248c4acc6ddb

SHA512
ded691a691b1366ffcab05cac4b9c3812d2a10176b9c2ba0ec2fabf67c7e0e8d465fb9ec6bdf3457053cbc1732e636a34642ee9c854324c27f812f9ce9d268a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Filesize
173KB

MD5
8339bc861ce9a22ed7b76464f3012535

SHA1
49065e353a3cd97a35b3af47a7ee9b9f365f78b9

SHA256
a426ddf6a64bd7a23b8803136c343aed1ba411ed41bbd466f49073d021ac0c43

SHA512
ec4c80a44152d1010486f3bee88c97ea6df6ecf5e5dd68d57f4bc4a1ddbc78bc5842e2577756a89044e887350fd129acbe381743621a161d4543e9d45a505e06

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Filesize
110KB

MD5
003d18b3d7591c01b9e86a9d0cf0871f

SHA1
0e5151119c6485cb89974243e1e95911c90a298c

SHA256
e6e7d942a9dd6d5254affe05152e6967eedf9e4b88328017846fcacef2376e8d

SHA512
db643db58aeb7dea92f8bd6e5c60b1c1fb7165f8dd04197e7c07a9b4b1dd0e550dac8c716babc10f954a5d395ca147594aff6fc764bb0ad76136e237a2fc97b6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Filesize
110KB

MD5
09bd7f4c11c8e5332fda9da7b87a8dbd

SHA1
5bff2c44801a1e3aa720a4220abb9d4b5f3ef701

SHA256
c287eb91e5ab2accbb63af7389fbc4eb4924c000565171b7074b7facdf4fc5c5

SHA512
6c074f99287d742fa2f00a0dea732f4e56a90aa936337cd38691a0b8c05c812b64538f8998a9d425131139285c33d0ce727a47dcdf5c054ed2502212f9fea9c9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache
Filesize
114KB

MD5
c7135868c603503cd49ec5517633291a

SHA1
37e71dca11f6cf33c525201daf8108514e56a518

SHA256
80d8e9a488037ca917ca94974c9ad5ab22c0959e117680746b5cd70a6f79057e

SHA512
0448765b1e57ce206aefe021bb8b0149871114ba06d1ff34dacc99658b22a7755bfb8206f85c7dcc0a55479e88483683218c6619b2bc7c97c27a04fa0eaf16d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe582100.TMP
Filesize
96KB

MD5
c780ad36206d85afd492f889ac53c1ba

SHA1
629a5e410085236ac14db6e5c391dfc73082b883

SHA256
62b331eb46300e24f0a615cc0a308f3c6f6c238e38991d2e3be1730fcbf11663

SHA512
ef055d267e212a26716387a23c33435dd201a2942e4a6c9b02f50d0d465fa8646236cc33acee50fd50a56d29f8bbaf1810d22b806f0c9afd557f9091fee921ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
Filesize
2KB

MD5
8fe7bd6cd1d64bcdabbf2e2ae72c5a28

SHA1
5e1080c3b8cc4c5bffc73ffe6d45fa073335d0de

SHA256
5054cd4d79ca09e90169cdaee05c1e3dfc5d6fa1ad1275e11fd094521fed3fb8

SHA512
658004888ba70fa4a8c4b573d439496532c08b81afdc0b2419187c2ec9f3e42408d9a7c2bd2c73efd06fd5ada7ea57e1bb5d188e57ead32a7c0c900a82099f68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
b8c9383861d9295966a7f745d7b76a13

SHA1
d77273648971ec19128c344f78a8ffeb8a246645

SHA256
b75207c223dfc38fbb3dbf03107043a7dce74129d88053c9316350c97ac26d2e

SHA512
094e6978e09a6e762022e8ff57935a26b3171a0627639ca91a373bddd06092241d695b9f3b609ba60bc28e78a5c78cf0f072d79cd5769f1b9f6d873169f0df14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
91fa8f2ee8bf3996b6df4639f7ca34f7

SHA1
221b470deb37961c3ebbcc42a1a63e76fb3fe830

SHA256
e8e0588b16d612fa9d9989d16b729c082b4dd9bfca62564050cdb8ed03dd7068

SHA512
5415cd41f2f3bb5d9c7dadc59e347994444321cf8abe346b08e8c5a3fc6a5adae910eda43b4251ba4e317fbb7696c45dba9fd5e7fa61144c9b947206c7b999c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
65621744863bc73bfc8816ca10cf29ba

SHA1
028b975c9b485e74162bd2692c6b5c5a304b2ac7

SHA256
b0d6a73c6c76b2c9f68dcb709d78f20c8337c97eff1ccd2dc45a5b827ab97d2f

SHA512
badba897706c97d897e1e768bc7aa776f7c4824272985bc83aabc75608312363b7035d71654b2463bb25fbc61eb8529fcdf40791ffd2d1834d638d269c6af836

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
d9fec3c6376ffeb73a7fd67b7749d8b9

SHA1
ca33e8d8bbb748e023fb021f04069c363a7af92e

SHA256
1c580f63d37cd7693f9ecef47487d10a0f9a825ce43571494d44aa36a9e042f7

SHA512
630072015bc797460fd2b6107acb46a89c3521b1b954fb616b606963b9d22e99eee3a51fbacae90a9c9584fdd250914e04a576dfe113faf4ad1e8a813e9bdcb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
66bbdb83ba9d3a224806415a26efb4c8

SHA1
d4b32fa5ae834c1f53e76e0be1f4f322dc2ddf1f

SHA256
ee703b08b5df5ab3b36f44bd555d9dd41ecfdafa2171242f0eff8fdc47bc240f

SHA512
b5a06d17d7e61a5645488029bb546861ab3e61fd1dcc074a39c0f32a3047d2a5392c7d9f0608f4db4b36f10e774a0c3344dee71c6ff7eb872ca07db4b65a1f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
1c6b34b7948d810ad6424ec94e088847

SHA1
58ddfb8981b12837ebc66e124383ce8e97e1cd30

SHA256
60a2fda0c0870c760779a3d437fae5d8551f7332f04ded6af69b22f098518ce3

SHA512
cdbb3391a89b7e5ca8fee8aa68572b2d115cb0d47e3b93e13ea730ecec908724902d1be43cd99c7891c2d1e4b85e2999c8330d2d2b15b89d4b5f1cbcbf33c73f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
a2ad88a96e0ec4570632a0fdbfa60e8f

SHA1
0fc57326b47a780412fa5f9b940fdf5da198e701

SHA256
30a5c16f53a582f8eed1d766d1b7e175e6a1803beac9680f656dd4bb9258551e

SHA512
d76fd626c1dd20888409c8447361ed51e3e7481d79cbabf0b8a4693fc269aa54f44e69010310a05dc5a75ebf79a63f18f625c443460f0fd61cbfdae46598e150

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0e92a6b4-e8b4-4d06-b3b3-5be16660ffe6.tmp
Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5950b685-98ea-4bf9-a2f6-24462c014fd3.tmp
Filesize
5KB

MD5
6be9c7078b8989e655b446d4c5f68df8

SHA1
604c55bab8db5d147d48c8ca48b9f2dd37e7e837

SHA256
c8f39d17cbb3fbd1a560df120ea6105b0c4c7700786f23c3ffb44d22b8f25b1d

SHA512
d8f40dad7d578a7abced97c5101b58c4120df9c6d5ea2240c382d92300fd22ae8fa03d653783a90b3f4be326d9b19065d0c51efc67c7ab8eeaf2b83662e66d00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
Filesize
20KB

MD5
923a543cc619ea568f91b723d9fb1ef0

SHA1
6f4ade25559645c741d7327c6e16521e43d7e1f9

SHA256
bf7344209edb1be5a2886c425cf6334a102d76cbea1471fd50171e2ee92877cd

SHA512
a4153751761cd67465374828b0514d7773b8c4ed37779d1ecfd4f19be4faa171585c8ee0b4db59b556399d5d2b9809ba87e04d4715e9d090e1f488d02219d555

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Filesize
64KB

MD5
c4f7300442a8f13dddf5c9bd09128727

SHA1
d7c8a30cdfe9027cca42c45f44d569627112ae6c

SHA256
5decc8ac1f3d26152842e44d1aa103c913711168c968c936bb782fb3cac10155

SHA512
3b6ebaff36af22dcc9ae7a7593657b56f99afb242ebeed50d26a33e1e6b0ff31c98ef576b96cf98c277cafc1050fee40b5d4c3fcd730595be756089a980030cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
Filesize
37KB

MD5
47ae9b25af86702d77c7895ac6f6b57c

SHA1
f56f78729b99247a975620a1103cac3ee9f313a5

SHA256
9bde79a1b0866f68d6baa43f920e971b5feb35a8e0af7ffadc114366f8538224

SHA512
72b5296e3dd1c5b4c42d8c3e4a56693819779167b9f02bc2d5f5a626b519a9cf10bee59846d614c929c42094b65d13039f6024f6cb1c023e740969aaefd060c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
Filesize
209KB

MD5
0e390bc9875af7ab3ab810b9ccadf2c6

SHA1
99ed25884e2a232c336fb9cc0ea70599aa54b7c5

SHA256
d2d5f8cf85a953538f0540fdd89808ebdfa1bcd73a1742a39c02e5f51fca7721

SHA512
f09049f9b6442e02c0b8b458a4d1004e6d525ab1596fd515dff9e8b023a4b46395a53d3c3d6466fece5f1a060080f89a4e29806b964583a52dff4b45074030d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Filesize
409KB

MD5
e5608e1d9fd785e07cf3ce6ce7953c46

SHA1
6b8da7019985d9285141c825ce1f57cc47d02a4d

SHA256
7302ede188c0f89d8372efc88bae419a7b70f8de5b5a85c6c6cec8142540fe10

SHA512
7cb1d38375b09da3dcc957ee2791466d435c33c0a6823ea238df687304d20e38768c781f87d932d659dc9d3d921ffe2d7c04871ab580f24c175c9a812b451917

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
Filesize
61KB

MD5
a0efa5ed4d2876e063ebceda6a5ee1a2

SHA1
06c14bce0a9dad23ab9a94cb976c1acaea052743

SHA256
ada73543baaa7b64d16deb817b39b984d7cff5cd624948c5106f9cb1c8af21a7

SHA512
f6898665ac8b7e20b6d613d7409d5e819c5a6af123ac512f9fc72ba135666b4fad18eeb8369c7ea6ab4a7e1a8671c67337c30e90166a2219867a4d6cceb8a9de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Filesize
50KB

MD5
40333c9d07daab8ba8a53f73ee3f974e

SHA1
36c2b17a7c48fc28036534f445b79fca9658f0a4

SHA256
998313664fbeab2403238a77e6c50a4541d20805b30533f67de1a12c624fee54

SHA512
4a893bf97a02f88a3ea7830b5f72eb56295566a2c6ceafa33fd80f74f81edadbb4172f71c0e12e4a06b1e927f9d7b0cc62c5ba070cd50f3f25c8b670a1270de4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
Filesize
35KB

MD5
fbf149f3cc52c0e994c22360da1fdc3c

SHA1
71c4a5d6a47d01dcb40c659951b5ce38faf1fef0

SHA256
53e46cc83cf44a5dce1b018be9011952eb7714f2949757cfa2e3efde44112dd0

SHA512
9046410e4bc370c68e98c5c00875469bf667cec7bfb14046df5a8547be292153d3621da4f1bc4ed583b044f739a3e56dd9f0fc70bd79196568aca2949501d1e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d
Filesize
334KB

MD5
5eda26bfdb5c5aa1d1051c2fab3d1c73

SHA1
c00d51ec7548ca43f3056fa5a13c1f8eb023d43e

SHA256
40df83658beb10fadd244de4ffce29d21bd53afe2c042a8b977967b1b6f74825

SHA512
8cf66bfcde4c538a91b345fcfb4a63a54423fff6915414c060aae413b9edf35251c00c3892a1d4c7be028b054482fef50d534c8ffabf16d446bd6942e56b0518

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022
Filesize
69KB

MD5
79f2aa99d3d8b52fed79466789e04e77

SHA1
1f9181fb8888127785b333cb1347568c5eb84c18

SHA256
660441d1e19b20e694e76063a3d275bb4ff0d1c46550ca04f1b60f98dd9b9a54

SHA512
d82618c29d6191813d26113ab77c5e50e995e4cc4ad66edfd75c45496cd2ab13aa0854e2fbe15882864fae2326a77ea578621e07389281b74a1b197c7b73ff61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008e
Filesize
162KB

MD5
8dcbce19a225753caec0ef8c1b3a8af7

SHA1
338cba512c78a236c7c84d02a3aad5e219f46715

SHA256
f0d14c86ea192f16dbc960b0ea82207975bbccf4ae4da5496d4128dc70dafc0d

SHA512
e0d7080634aa3abb6330802b85f144006a7768bcebdd4e487d815a856b0f9b2cba7678e11f81283cdd6d6bddce872b7c26163a834c3c195905de3d9734672035

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000090
Filesize
249KB

MD5
413bd7695fc10806541266b507934723

SHA1
eaeb1968d6504b8bcff3235a72794fde0e003108

SHA256
c4f4f9f125d29aac12c1329bd6aa0e6fdd1b9ae6b715b3e69efde0353dfa6430

SHA512
48685ef260bce07d2e645e079b275d1c0fa9606b368fbcac7bae0d30230e5a0ebd10969d7d7a0bed2d9fddb1433ec6b77328474e241d309a15b9bbd526ba8307

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000092
Filesize
88KB

MD5
b39c6f847fd620ee7a928db641a68ed1

SHA1
8cb3d14c2ad3a52124612a90cb52ba2ca3615fb2

SHA256
415e2d980e9f423225ec7d712648b5e1a176e19fe8865e2c7c96b09b38ca610f

SHA512
d62a5a4b475446da83f28e8c5d68ae8273e6b213e40bbdc3f04792017448dd77e9811065098436e95bca71bd3d2662163d971b2b6c7ca134a70f099466de0d0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000096
Filesize
135KB

MD5
d0fe86c1a2b9f2eb864b32e74065f42c

SHA1
ce7a4f0e17f67ebd22e5a6ff57fe445c74ca21ee

SHA256
1865f35c5d680af876c97fa4012c05247698f9ebb8382708f1800c182b504cbe

SHA512
1b93f384945f0ee136046510acb660920f4e155c63954ce4a52014697a6afa0ff02a21a83751b5e6900504975fef01b6dcaa1a69d2bfbaead97e1ae82b51a0f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000097
Filesize
245KB

MD5
7321e0e6df56fa97bb03f5bac14a83ec

SHA1
b5d7e7feac58ca8fef880c22e82f398aef04e1ae

SHA256
e14885d19993f74c00387929476d91602a09fd7469f1d24e1422bfe604b5a451

SHA512
9775e0b34ee17b0ddf18f3720057a2ae4b1ad895a7c279bb4721313dff3b58eaa2dc28c33355e277833b4768ee479b76aa662139e57ec2959feb1eb69c196ff6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00009f
Filesize
173KB

MD5
0a1a8cbeda456e3eed9baecec76e3ba2

SHA1
8ceea5a1410d94efd6665dfc20b8e2fe0c4e7796

SHA256
bc04885ae1066be520110710b5eb5464b98f5abb1c35e3ac62d91df25e2955b2

SHA512
76cbe7fff6db4f32dda90bd0af0917fba4963d8db91dc8ba4dcb731f31325ecf6eff3edd5bac86aa1155332bce8ffb7bf5e24a87d926b733ad5d8dddbf985fb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a1
Filesize
243KB

MD5
d53f96bff5719b41fd2690f0ce867d3e

SHA1
d12fd3ccf686bc3b2b45717768c28bd4289299c6

SHA256
56c11b013bbea2a7e3efc10cb940c4eae01326a4c6b14cc43d65351f9e4ade6c

SHA512
419ac45bd2e3c4dcb909bb656150ddb46e71214a66f07b8753e0f718c195242bc7deea7f306c88855be990ad84bd16950d03792a0572e4a904f48fdc12781ae2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a3
Filesize
78KB

MD5
557f721938b3160e671540e308d5ecb8

SHA1
f67b29d1c9bead11d7df9f2548eb6a4ef22bc32c

SHA256
310f14d3d6eadcc06bd59e968257f1c2339e52233435075a237a99d0c79d6f67

SHA512
a0e185a60e8d8a97b20a1aa1475889351e4e681544367ac1b77c1c369a434bd4f57ce581606e8c530b7f1a3abb8b9a835ce2aca22a32b13bdecd05d087a8421d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a8
Filesize
63KB

MD5
00247d52e59520f35787bf053fd98461

SHA1
5281d12b16be2400d0ca740ab48437f91376861e

SHA256
7ab4e0c728e4f85a90c04936c855c4f3c09d8a23ac05267912c21a781e67104b

SHA512
42a6b23929c3c5087f384c5b07045c687dd2174234a44d99b5b54fc34ee3c52cf9d67c07074dc15497cc7a30fe21627fae001e378a4b8193b7c43c6f05332b78

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c3
Filesize
155KB

MD5
9acc9de55fb9139d49d3324d114c3b04

SHA1
da4839944bfed83d125cb53b8895b3f3cdb5ba74

SHA256
d55a0d861964972b338573fc12931befaea9b1d35995de066c7d6e10ac9581c8

SHA512
9d68284c0bc476c48d115fcc5e20f1bcf4e435ecfe1c2eda9b5f75251f7c56e6ceff7e79893d86c438cbc00207ae811f314cf02559256f85a678a37d2a2cb50d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c4
Filesize
247KB

MD5
89082234207a35b7a1394b2b207dcbdd

SHA1
6519a7ac5b2ef942393d902e29e188cd63c4c1ba

SHA256
f0c9b11d9ef7300d20189edfb652d88730776b1a3568c8965336d5d757475ade

SHA512
3e8d4143fe827c39f2b06e2af9710a44ce1a40d9efb4a252a7e3752474da40e33ed6e4cfbaccefc43dc10e8e720a4949417431ae86056861a3896ebfb857a892

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d6
Filesize
54KB

MD5
1c328bfc7abcc2ab58f68c081c89dbaf

SHA1
5e8c3b384a50a20d772aeaddf3d5c4c9da60af3c

SHA256
4d28bfa0a7338256a73f2cd3a9448534b30d6e7de8b12591fc0d660bc98bed2c

SHA512
0311e25a6ef9a21ef06bfdcf9af059b9713feaa4991909222511b2f187576d4638452762822c27fe8e6c9a9f72194c0c3a2d8e71cf01b9c7dec89f71014ccfa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000dc
Filesize
19KB

MD5
ca7fbbfd120e3e329633044190bbf134

SHA1
d17f81e03dd827554ddd207ea081fb46b3415445

SHA256
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db

SHA512
ab85f774403008f9f493e5988a66c4f325cbcfcb9205cc3ca23b87d8a99c0e68b9aaa1bf7625b4f191dd557b78ef26bb51fe1c75e95debf236f39d9ed1b4a59f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000dd
Filesize
16KB

MD5
4ed9ae58f3e2094afbd1cdf75c6e33fc

SHA1
047323c3215b3af488208455de8757c66c33845a

SHA256
d032eab6a45e54474762e2ef94ce266e80616f68cf48e06fb9aeeee1f3ed38c5

SHA512
9c82903fd84d6e9b4a936dd861f97f09d885f508bb39917f6af2c7768c5dbe5be4c61a980d4024c577b935efe777ea0fd47d884df45f840f395bb74890ba534f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e5
Filesize
375KB

MD5
e8ccf528a07fa3a1c470af386c41f5ec

SHA1
036f5fae61a930d5a976ba489dfe8ba13ad11d32

SHA256
c0db10a9aa3bdc7331a329a1de2414376fa3bbaba55d477dfd02b23180ce76e4

SHA512
ddce6d12614a3da2048b3d7c16567bf4730b35d1d2d8d4f0abf5a14ea7d4f27c9c70edf29a641761f3055a96b64593c8e78a9c03892badd6a3e38ca6290a5ab1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e6
Filesize
78KB

MD5
592f546ef399c52c9d3247e77ba8a0cd

SHA1
41841be385d538053778196b7904844d027abea3

SHA256
70e3fd748b299f4fca9dbe45dfbb403c628d940e0b75354b175cf0a91a4d3078

SHA512
7a22a0b2f864299b7b5123709ddc42fa15e1ac410f864b2d0f7151341e5c8d997ca7d2bc0c101c762461c53ed062530abe58be05ce1563b577d7b38590b3fd70

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ea
Filesize
146KB

MD5
4de2ebd35879c87492d880241a7a5c9d

SHA1
cc1e02958d5ca92097796e86620912011ea411f5

SHA256
8f480bba9e312928f6ad57602c0c022ca554c22fa3b821527ee8f557f9633e36

SHA512
9923826f9bffb035b07e8ab9d84651b65894cf6a497844d33d262afc3441b4ca3b78baa8f1c0ea8c311782fe51a8a169296f8d791499c2c2f828c215dd1070e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000eb
Filesize
239KB

MD5
0dadc800452029befa4708979438f4e6

SHA1
a279f7f8b89cb349bab8e4bac056e9252d4bcaa1

SHA256
eb0cfa041b6232842347beb6a16788d99d932c7e935a39baaac7e52caa29fd17

SHA512
d977c4f4a4e8e1679f1851247779410406b4c7778dffc4c65a0ff89ffc95bb06ee01fa5c0b81018c6e5ef27423a5808f4d1ba6a1da77496d2a1a12f5c3dc9587

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f7
Filesize
134KB

MD5
deb5e2b48035a637caef0ec2f63d7edc

SHA1
9ce03c0518e41b2d2682320961679845b48fcb73

SHA256
562e6822e87c6a85a9bed7adc0b650a8eed8dbeec8d8bb1652244f908aa75fff

SHA512
81c5d7fc2d5b327368843de63df3d268d25e6d13498dabccd927a15518a9c4aa914ff478cb2436265666456a21da820a80f8752351b593a807f7d536fcb3e51d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000110
Filesize
67KB

MD5
fa9caf97b169b97f64425fac5776898a

SHA1
799cdbf5060714a92aa991f93202cc55f97ca60c

SHA256
29c10624673cbf80e30c64190a1bc32131ed5f4be8879fe21e4b68b22a5c24a6

SHA512
d3215213d453aecbf0767ef9c4d7de0dad34ca0029690dda17b2f8e420066aca79043055722e125fe060d44dfb45ee1a1fa3b4ab66652998663e677dbff99a4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000128
Filesize
150KB

MD5
b353d357ee90138a4f933df114451bbc

SHA1
5462427955e5481f9ad0d44a24f9c83933a86932

SHA256
f99e758d41b4b7b40a7e481addce48f01e9e2c5e8cb14920dc9b4e2736c3ca83

SHA512
b4c7493d143ef9c76be81a3f8f03229b2856eafacc0aa0b455c45eac816919ab9fe939225a4d3d8677d979c484da01eae6e29660ac3a05de513545c18c3f7667

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000130
Filesize
101KB

MD5
a6152aa3667408d21306d6221edd5f21

SHA1
e2314cf8c80727e6dcad656a6092ea0076100640

SHA256
e0b1b678490335cb9800053d30c39ac8f98acff560e5bf339580a621eba5b08b

SHA512
3167d591234e3e137afcf4335339bcd1d444517ba90844479d6093353e6cc0833726a7c9c2c1137ce59dd304640c9126b578cb321249db4a85a32aef9fa4d4e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\022d1c2673d7a631_0
Filesize
10KB

MD5
ec841970b3f6e9df93ede242b1b06499

SHA1
90b0d68dc2ac6026f80bfe17916a73d8728dab29

SHA256
ad7711bbeedf9e237de4e861cf90c0a90e470bee5e12fe5148299d2ac63623a0

SHA512
a8ba3631e014109974332e39c1abdf67c36e9b5d5bc1e7ebc268f23074e872cb07e75dc09351b1316af838b59a4adb93e59a5b2bfddc7f0e62feba9327a7ad21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1d02725b1d01da34_0
Filesize
1.5MB

MD5
ac6a1d0d31c23e8d0decb90a8387636e

SHA1
cfed3a2c8b7c3feedb7dc44545cad8f092a69ed2

SHA256
6d5663a57f9e2d7d3c14e8cf152ae85c3d116297154945bc0d5fa85064112088

SHA512
ab3f6c5b54179824492abbe8c5372dc780c8c8cbb4d4025e4796528b670f29c86024d4db5b8ed89d4ace707f3ea9bd5a84c546b8fdc7bcbf588385eb9bee1e9a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1e0aa654066dc63c_0
Filesize
2KB

MD5
fadc136092ac27df0f205089c2004f1f

SHA1
6f7e729c3e31129607bac4a17770d2a04b1e6815

SHA256
199317f56e2012a942f8e2b688d4119634f06621e8677412a61d5d7b1ca3f014

SHA512
d2f41244865acfbbdb35cfd0bcff3228aef3fbdc6bd06d8ef4be074add2f7f1b79c93fdd9ed13d1fb32bfefe69b593df32cc018659ce5ef134852b5f84274110

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\221d5564805c80aa_0
Filesize
136KB

MD5
09ead12986032cb8156fc674293ae3df

SHA1
978f08f341ce7642f2a68b7a2b7c8df94b1ebccf

SHA256
1f483916055afed336c8ea2ec98bbb1ba744e5c12caa1cf02c2e44c6023ebf83

SHA512
a6d65ad2ea1a948c04ad622f14a3b919c78219981312336091a3132b6c102a683303abce5b1abf453b7503e356db85328fff0e2a5ed1af7e1318fc43ada5c175

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\23ddc4bbe4c85eae_0
Filesize
413B

MD5
7a0c48c0d492b96f4586db81d5a42bec

SHA1
51b75e7431374e40d6f2606254c80bea6f7effb8

SHA256
845d596c1f3d3b81f6c4c5aad50f152ef00381f8817cc9b03d3ac2605933c22d

SHA512
a29e0f3e890002472979cf774cd4b1ff6c629aa72a5007d6f05a9be429cb8dfe4f06bdc6313e872ad062541acdadd9dfd5bc07d67c7481530e3b2d8cddf6bf46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2747b49265ce823f_0
Filesize
16KB

MD5
ac919ba8db579626de46fe60181fd810

SHA1
98b4e3a5119d36908ebd147cbf9997d850fc2aa3

SHA256
68bee2332a45b4a685a551ccf691b87fb8b3d7520585d618add2239048d8dca4

SHA512
ca5293f5ea998d3c8c626124f7d14883579fd2d6bb3fa658cc36555cf634afc4b4dd0876c2fcce0db435c9af655a8f208cbdc6f7b3a20adbc30c572736d9ee96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\41e081c7623ba3b9_0
Filesize
1.5MB

MD5
e9a95c73ee52d9655df5297315f1b9f8

SHA1
24231927fb0080ebe1f31878bb659bd605a3c9c6

SHA256
9e6c9568cc0738bd3fe2c6d3c1ce7f91db5eb13db708839e890dea5e165056f4

SHA512
65598ddd464a905c1fed5d460d3a30a4fd56699c1c9e069db82e48541574920eb35e8abc979efacb3eac261fcea88ec609c8df549526886e0b7c22d58de6a313

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45f2a7eed94ea5cf_0
Filesize
8KB

MD5
3bf71a9becc0bc669d8db4f45b1b1317

SHA1
cb0f598ebd4fde815e3d22332a408bef36939ecf

SHA256
22e19b1a302625803906d803573a66f826e356bcb44e8ec66028d4d50932e00a

SHA512
e1837da3bbe405a4e5af511c5511d21e8130c72d8a093965a08efd77caaa49aeae175fdf729be5adba987f410ddadc2e9e33840ef693a1027143cf3a4d102e9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48928a564fe6558d_0
Filesize
286B

MD5
f7ddc0625ddf354a5e3c35618346ab24

SHA1
298e57034ae3549e4b09ad0d5f0ae0c975d5b362

SHA256
e6c016b28d0060e0bee4a23d2bc4602edbe2191127b14be7661553aa6f704362

SHA512
104d45d1cba09fbf50b557bc9250bde1f63f65573c7c8dbe9fbf2a629fa9f8d96ef86ebb5bf30ea8a9dfc5d2a47084fd3355320dcb23af8e8b8922bb7b4ce7de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4bce03440404b393_0
Filesize
2.2MB

MD5
25743aa7d1ce9831ba5b1283bb6eab6d

SHA1
e9a1a7a13010da4f1553a9151bbf0eb4dce97e2e

SHA256
df7ec7bc0591c1c562eb768374f671e3e12b229ce24692192587eb8b8f5a2df0

SHA512
4fba149bea4538feb4dc48f576b249d9a8f3fa7c85a13bbaac785117e4e6a5bae530077ca2c5e526e1df2c73d800f074270bee779e94f9879eee00f49936e362

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ccae0f086ff811_0
Filesize
388B

MD5
9309e246d5d06cdd7d7e3bda288ddc63

SHA1
40556d800b9dbb15400264ed4784ed06437af9ce

SHA256
aae1609e12bbacb68556081b34c5f82bc555f9953b745725b0ed21725ebf5496

SHA512
06658f8f955c1d5e1219c7816603a57cfc98b99f8ff4edd31132ac6703eb567ba7da667bd04488d14045f0d77aef81745d78ce4a358699857bec7c99e62c2b46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\56e363a6ebc62790_0
Filesize
13KB

MD5
e98171f60a77bf026b72b0baafbc2b9a

SHA1
64b0f1dbe8f465cd384d5a46d307831190764e23

SHA256
3573da65b2881c54d7115219a15c27f1f58657c03161b2a04986d3903f19423f

SHA512
2ac033c9cf0bf6f5dc176e3d68a99db3525028ed4758b9ebd57488df88ee6d4229daff4d9e246736007368d0e92fcf691a307a02401be02baf72fa7b44934847

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6bab2eac8aacd680_0
Filesize
16KB

MD5
83d043cdaed398fb508e1fb3e6da607d

SHA1
e4a9b322943ffdd7532e4d7eb1fc751169eb39f6

SHA256
32adbf247012e8b839fe9563709d626f91067281b180e041ad4c6167495a0a18

SHA512
551a6cc909062cfd4c89f556c09473cb2e5ab18e9e96a1fef4780e380194f0a812908dd9d49cb5a864592ef928e51514f853a78f562e24408dcc5ce14ee36901

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9364c49747285509_0
Filesize
572B

MD5
778253c7e30eff731c0b5d12ce352256

SHA1
8eee89231172c646627128bb63cdcb297a326337

SHA256
022b6095294dcfb36f5d40f75b6179eaaed64fbbbde1a5e3535b6643577cf834

SHA512
0c51171e305d40d627b55acfa63cc437e2f9cbc2fa2d6c3b1432b7d619b40ecb4e26f32fd31af6b81fc1b6e8c1c0902ab6d6bbef613c502bbcb38082e5e1bc3b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd22bccc18c71152_0
Filesize
123KB

MD5
98d870d28c34f76cb56aa8f81b5c5be1

SHA1
5b63f679d8db7cbdd816c2375ffb78b4d3bf066c

SHA256
cd8d12c6435c1abcff413e6f2fa6fa1d29ddee5a40d934716aecc763b51fea81

SHA512
743732d6064e03feba19afcbe678dcd36ef745c19de6d64ff5bcb7096158de84b86ae7bd4a0dcb4e9168a2d25f866550a3e31ff995c8f6dc4135b0b4553ff6d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cd865ee01ae57ed2_0
Filesize
35KB

MD5
956e3b6cc679c5797d1b32cb1f4a2b90

SHA1
167e1f589353deb8138495424d392955a6685989

SHA256
c09e5bc4d63d187b1803b287f3e1741f720c0824887514f7b5faa4a5f409a43f

SHA512
722dead2f3a424326837bab742bc156baea6f44f176007967d815df9edfb39bbf1959235dde6783a62d0d393552db5059c5cfd825c696dfce7cbcbdae85ebe6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\de401de5e5dad9cd_0
Filesize
504B

MD5
f1f4658e9fdcb04007ec5b18da9e04a4

SHA1
1e1ed8b6f6879c9a8d9af19c7ef7a67ec35d3feb

SHA256
bd64b27164e929ae39ee0d2e2dc7615ba828e225d061c886b18a56b17a1537d2

SHA512
c3752b65765bbaabb11e3e1f451825fb25eeae3f262ddc4dc173c56c2572dae6f1f7bf38bba3889e2b42e120dd5c823c0a24f778441cb4da34d3f18b20ce0ea7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e077e1b88a1510b2_0
Filesize
8KB

MD5
63eafed4094e07166b9848e23b8b6ec0

SHA1
77e25fb10844f3c421a0cf4a32ce40e7b2a39a91

SHA256
3d52226e41c09c8ebd664e401ec9d5d049205bc1ebd6bfc514ee379dd1c6ccd1

SHA512
0b82897837b765a6721a8886ab0113203edcf19afe2f03c44275aeb3c574a934632bd077a285f1f5ba6f55bf5616513adf467a8b11f2a804e6265d52f5abb0a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e69bc75a07bb63f2_0
Filesize
205KB

MD5
4fe8d2dc68119c406aea512cba35d653

SHA1
5fab0663f3060827954ce6edbd234fe2f513c2d0

SHA256
caabf2b79a928e64de1c300f7c1aae317ce38d2f3699d739c2f8b84b325baccd

SHA512
25e06ae3ed4c087f1c62de5c0b6b900564d2e4eafa6dffd8c8a775e80cda07514992f8e3a914680ae212207b5d54efb91f01bdeed2406682106e17f231828e26

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
48B

MD5
5efe10ac9bf04e8cdbf4784c87c12e3a

SHA1
0949c050d34f53e1f22ce6a523aed6ae31490cb6

SHA256
f6d457af382b72d740767717a5fba8a9a790e7da24bf01c29c7c96a1461e8051

SHA512
6f84b58e35fb393b7634c94d2e39bf2c35cceed1ad1e2892242be31e85c2d1b3b14aece11378d38c1cf2b82f9ec629a207d29874d3eedc80a6d01a9a30699203

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
4KB

MD5
2dd601112735750a33c4483d2ae22f18

SHA1
99cea735518f57dd908e0fa0b52c0be7d4f36a5f

SHA256
5546708784bebdc48c7170cd1f085eb6f09912b0afbd4f30c1ae2accc1802178

SHA512
b102f1efdd4803bf3d2d6f83ba6f5e74a4b711c6470df2c9df49ce3c2b09144427ef28e60e0fa7974bc129383369f64b502715fbd61f39425aa98bb343b15d37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
672B

MD5
5a071eaccc760faeb66fc8c3ef067876

SHA1
b9d60687a68fc17e2ea6e73c138890f4d8dfc121

SHA256
913b893a2d3abb76736e7fb04aa2aabb5c1ab2595b37a1bfccdec7a8a0c547c1

SHA512
41125af980a4851bc5af167f7b8199d5c41d121706d60cdcfed6c5f5a5cc3504ac2b9a9a92de5bc390aaebbac41a93d2c3139e4d5f3e38ad6be6669c238f729f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
4KB

MD5
c2d8b229559ee74bb962091a67592c01

SHA1
54a2db2a6f81fef085ace1b7d265f12b737c15dc

SHA256
b916585723b941418321a31c665cc322df0be4231b4ece9796a5c5a3fd310486

SHA512
727fa5fc00a4d2081e42559e3c40a0c7b30ff93a018730ba531ac2473a1ba52e48c74839672eb832fc8a7832d83d6ee79f3905a09d8bb2c793d39bd6ae1755f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
4KB

MD5
faaf5f00e11fac619570a732e927d5a7

SHA1
d435fee6aa45187eec382ddf6a9fd8844a0d4a3a

SHA256
655bddc6fd8a5ed90172cb035eaf72f70da8006d33fe28c19e0b151caba2f6ed

SHA512
a131bc527c15d4fc2a613fd25eafd0feb9652ea4b825567c52df4f1293a813941f0461c26acf1e41e10757679e9ee2709d0ef5d5123c3434a3118e1b2c16f60a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
8KB

MD5
dbebc12445995c533a194a6f84952525

SHA1
f0b0a0f297d7e13022e8f18436c815bce12ca404

SHA256
32177e0bdbabb79b76f1276f1a87e83739d53ecb8043d5d2e8b9cb129d03bc06

SHA512
a2c1a227063fdf656e0d7d5a19d37c0f29696149996f94ee249abcbb85086ee44b952e10698034149c1873967b7dc0cb9b88edb73dfeb311c89efdfca8bc01a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001
Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk
Filesize
2KB

MD5
7ebf257409a7e6c2b779af264aa1f3a0

SHA1
8729c08a86e1881f48b5ad1c4c2ea7de96e65b27

SHA256
cc03b78f32b74b643dea9216b5c8d76e6bfbffe9f5d770763bfe2f0b007d5496

SHA512
6e45103a9dc8ead20908b656675c4667219ea5e3db5446a7c18a911c028339b56527b715209d8602ac2bbe95d3cbcc396e77ef2c0878dca883eb4d63e9adac48

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
3KB

MD5
034bc9107fd16c1fd009bb071b1a7705

SHA1
9313dc958cf28f3f095a0584674010c1f10054a3

SHA256
970a920a18dca6cca49368c10875cebfffd2bb280e406d872fafd8beb544d779

SHA512
497e654df3e640bc5a276b86cdaf5248a57006d4742016f2831ea49a7d6709fcc03c1c2d92afcd8c08d3fa3f95ec11c7ec8212e28f0c33bd9d702d00dfce93de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
16KB

MD5
14f93f7779c2f18d57fc87ddb9c2cb1e

SHA1
2c8581a4d9b339960a9fcaa2f02681a93b9f23d4

SHA256
015f4cc1297e2cab4fea142f4845d232fa775e1399dc2ff9a0bc0e77189a677b

SHA512
1414523cb811fbb19575a85f53d5f3d7cf36251292326255d900a6cbce116244bbba0223879f8fded776dff2b406c6f1dd36155211ad1a76922a86c5821d145d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
17KB

MD5
a22b1499bb53bb32db05c3b79f32e4ec

SHA1
54a7d40b27f6e649943dc48bfb410b02d049ec4c

SHA256
5250406b4e568af5d11dd14f152142c1395da8ded80f7122361de6826a473cf0

SHA512
51e20259c228d999458c522d063ee0b96e275774ccc72a8ba59e13eaccd5e6bcf34712bb3c90677e798f2be0ffc39efcbc93da603d455b42faeacf45f8415368

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
19KB

MD5
e224d9807da37a7d1d8d8895c34699df

SHA1
407c8dc1ddb31ad870460a2a5cc3a1251c473786

SHA256
0a1afdfc3144d8e9c16d544b6897aaf99511bf2f6e3c7e72750fe06623b9daae

SHA512
0ed61132597002a541e9ee4ecbd1f7b8c8176e31a3b7712082552c525dab055d3a99d38386ce8cd46644bbd34284f3b87394a785834568c167feb13610572e66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
17KB

MD5
41aa125b607dae8e9326d70550fac622

SHA1
26044b823ed396f4847f346c2a0ef41694d49427

SHA256
9ecad6600f52951c7e46b5a2fd1f9cc2b0451b574943f9db93c690789d6c8886

SHA512
88831cee659c4d5c65560b40b0afd09e7c4def8620b3068ad120d2eb72bd2f9c694facdd6bf66919192c26cb7c248771ce02db322b32668f88c503a26303b5dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
23KB

MD5
088f511efc7292c2fc5f89d4ed528e68

SHA1
129da221db54f6121f67be07743f620903609612

SHA256
e9bbad980e0697885e482520bdb13075deadf2d0bc651176c77f637befc4903d

SHA512
d300555389ce28d4a2686d5f0ae1f91db37df9259ec8bb84db6982c105bbcbae322c2c61292e3a88320c4b192d864e51ba25e9c986c8cbb466405219421b8c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
28KB

MD5
9fd9478b88e100d28cdd1bd623c4e8ef

SHA1
707cdb3fccfb5b1ed2a18548e7f9634e8e71ca9c

SHA256
ff6fea71f48f22c2f6356330cae5878add250b5c5ce10d7e0e992a30d0f34f44

SHA512
d878c266560c1ea4e930e32f5958ca5ed3b300922e65778fc8a4ba5ed5cdbd7591ec1069e0e88267d3feab05bc16c1c03d4c4525a85f2c6261c5de913d86f47c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
18KB

MD5
5237375bebd6dc0c62676b5e6975229d

SHA1
455411243642b968a5cd50ace0dacf71a4b465b8

SHA256
ce7b9487ab7b32f6e2ecb3666558345b478a74877f6d49b5dd81622022ebc029

SHA512
275159278d2adefc69248981aba4a31d2c114d9127f929f4658ecc4dce19c2c9f4d6ee2e92e557708170d95a2639829836f733713076c26467f79eb3c675075a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
4KB

MD5
a9316803e9536e057c880bb47ae94dc9

SHA1
588261753be784feb6a7b688de4f3f5ad576baf0

SHA256
8a17ceb68720f035f349ef46af6dd7483ac7bda5d270f3a4e727054127e8b902

SHA512
cf8195f3429bb21dc0238ff50cf06b09491023943b9ec1f17b55f27595b73d29cd0638bbfe7e0e67927fd4a4b71f2a13e5f823d26907adbc4d90095df34a1a1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
f26eb6cb4b38d4bb42be4cb3dc45dd42

SHA1
ffb76eab159866a742357bc46dda25876c58a392

SHA256
1f66be19dc4190a3c63186a402d2b87d33350335601e817e4b99782370780e1d

SHA512
cfb28165e82dc749b64e01a7b9845b3d09b06d5a71443cd1ae0eea59d69e0b727342a88883bdb8d3970d3f338eaa45e91a328a4b4819adde160ffa2be2d3416b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
972d1aa48af77308a5eff91290578526

SHA1
00e2c6846430acae35936808043059a636409a4f

SHA256
0a22627d90ccca6ed0cfe78fb5600a9df048132cbd832c2d4947b6c7c0edda7e

SHA512
af7378931e3062139b13d0c5d5042556bc9e9f297793433130b9f095776d9a8b832e1bac1d7366160642d1b38a41de893bc20586d390260b8636f35bdb2ef107

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
9184a0f8e1845abd79e09de6cddde1c2

SHA1
ab55cef6ac149ff519181d62f0eece654b325d26

SHA256
d4f7ce6a6921433a0b563d71497a2008f7cc13a7d2e4f2c894f4a1d56f17d54f

SHA512
8b102972173d170b5f1909b955f6ec52e09bb6a99f2e072460615a3f37c276ca9e3fa2e5fd18d8544cf6a583954622af94b201a434ac099dc558c77d1e5e791b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
11KB

MD5
3d002d6b986d4879fc2e3b50d54c923a

SHA1
f3b17d86f0caf35701a288c932442db533228bba

SHA256
da87a2820be08b40fda5b543d7d58b56f5c22eef13b0ebc746a8fd448810b4df

SHA512
4bb4ca130e49bd46f6f64fbf48d988936b9c0c0e0a44973c1eee4f7f27e28fef44fed6a878dd27c02cde7d295f26b14e60e0202e7f4f02c6a2b024e1c9ca58e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
16KB

MD5
05a4b4a86496aeeb63ec82a96f6e67e4

SHA1
7d8c7653a46e25a25e8b0f6fbd68509deb1589c1

SHA256
194e7b0974f8d70b964d799ad6d240ea90668851030e738b6c7e4dc91a694698

SHA512
7749472d441bd1ecea63087af3c0a4e0b9539f8994817b619f24882d4ffeb821b378f7096367e0323b58dc711fac23aedd8bc1282c01ae106ca04924e8a2148a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
8af48d5acca300ff92234adc5c2e2be7

SHA1
f42910a29a5bd98596e7b67ae87faf0aaecf757b

SHA256
e75021077332c087ae21937f7b4774530a084d30a4e80acbb5eb17b00328da00

SHA512
348ab4e91caabf68c1a40e60b2dcaafb2eb1ecd72d25b99493225b1007d8db0bca3b527ecffc470507a7073cb5cbe1d358ffce8c332ef6f00f8318f71781eb4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
cecdb9b086d268f6e971a22307543b4b

SHA1
bf3513e35f30a0f04484c6c7cf3573f93c298a7d

SHA256
0fc8d80172cb362e65aa9892302f32dbcd558d15e16cf47ab4c0bc4633c9bfca

SHA512
25462d6bf1b7026cc787766ea17c831107c5b5c365cdd1d6fddbcb67f95244fac1ce2d44e56d8f55a8c92060ce0b5689c69d28bf80d5d15dd150e22c048c5045

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
fed91260c36ff9867e9df6f87beec909

SHA1
72f822658e382f45b030e66250c163f7f5e02b34

SHA256
061c00aa505a11635552abfa9422873f1e3d699492372804b3b047c08276bda8

SHA512
921ad5691a7d005966595a4c8e7d5ac27b78f39d1ed503e1455312c596560658fb57a1ce7526ef2fdebee3873cf3c8bb7402b521976dedfcbafcac57c36fd8a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
23a48ba50eac00cf5980b5a30bfab299

SHA1
3a94d673c43bbd5edeee4c11dcf365473f88fc29

SHA256
99bb9127ef55d9d9e0728cd3af8e4a5f6ffbc6ba11678d28f26945d40a330a8b

SHA512
169d659454a14b379844339fd081efea5a37ada4d9461ead54c0cb754d03fdcc2d3d642ad101984dc49644c4b13db797c1985cbb115083bdcc181d77891af1a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
8c33bb730fdc20f38272cbf60813b091

SHA1
6fd8675e0848eb6b2881aac1a02ce63352ada47a

SHA256
4143c9b60efcc9a520900cb1057b049846111a17ccbef6b1620eeb4b9162b7dd

SHA512
3f06d18c13a1aa14a9b5509d231174e973a26fdef4562d07defa3f848629bea509db8f8e594f4f02eff2e2b70d0b99d6a9255ab3ff1881e0fea04b90e9288bc8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
704a6adcbf357440b4ce7a02546085c1

SHA1
3b927aaa1fafbbb8496719e944afe69d673a86a7

SHA256
f37afca4a1516e33a2193102ce52dd416c3d405b8138d55bb7a1c4ba82eb8354

SHA512
88a90b3ba16bdd5228c2c849d455059c018bc61162203448cc8b238eaa79c23a364b53d03882af5a5d254aec5679aa189c62a0dccf1bee04ee996584fd5fbde4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
410bae59f523975f40555dc290555201

SHA1
a2ed6aeb12cc6b8de49d4b8d54a091a91dd9eaa9

SHA256
5574143640ab66a5c1f6d53995a376a27ab164b6226f1b1b57990e3987ea7daf

SHA512
2c408e88f60912643a876602e9b8149deebc787c7d3d946cf682c6f87e022a5ff6644faa15fac3b0e306da2d669dc8aeb86c5018010073f33691f39bc287da93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
021507db3fa0896918aa64d5d15c5e32

SHA1
2f50047f69bd0c70cc7bc75d8a67a53d14f075f2

SHA256
b493773401b788d0fb218baa95fdda0f8893f399a5cab682d3feb830ccb8223d

SHA512
5deeac50d31b6d9c689f814af2ac3e2b37b2e5de679b96c6ca9390303b9c9a8faafc2c6083842ae5e37ced43efbae2a3d14723e5bea59e09b4c3bd6f6604cebc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
d95e1d44e5dc83571d0a771ef036e7dc

SHA1
83dd8227f50c869da2efd193c5f631710a12412d

SHA256
10ea1b766d466470527ba42f05e9997199fc30ae4dbca0215e1100767533a43a

SHA512
fd6c80b618a14910c67c52a759adda164bc350342a6728c0404b153011494a531d20281ae32981eaf74acdd17204ca57d80b915af064e14044e5b4381f74469c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
064f631ef1cdeff4b223c80ed859e4d4

SHA1
5ca790717ddbce8fecea092ff31ca93efb917126

SHA256
2023ecf900abaed899ba7e1d1ba37649a0e96eb29094b6cf926c86d626ce77c3

SHA512
44b2efa61c21ea05672112a57fc734ac11a30d49e9f2f392d9b5d344ce4ad1eaefa78ffc317db9c949f836eff080a5ffd141c75a51f78658805893d84c76350e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
dbaf0cb42824e491e8070af25df29deb

SHA1
744baa838b35229e4b31b8534242f5b62e81b18a

SHA256
cd4da8e3d9b696ec1c089c2641d2df8565670bd5bf2e698356f2a65c6b823576

SHA512
27c7ae166b9431e9fdcf93d6055de9ab01fc60bd23156680a234b1598d2de3a97126723490e2aa8a49c6ffa041293bb2cecf44104581e90728f41971bdfee3fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
19KB

MD5
0e2e1c963426f3b417a5bf7607869c79

SHA1
18cb2a92ae46f71a6eb18f539980c9e46aa62dfa

SHA256
0bb4fb3fcaa85b6a389453ec9ada916811c2a4e9c54563c702252754f4c8404e

SHA512
ef1c0f544e6b176d4c887c7b30e19aa91b90772dc1e628a664e202e969d9c24aec160f243cefd156fdeaea0311b50acb6857b7eaedea44124a69eb2dc850524a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
a9deaa276bb1d19b84add427c615addb

SHA1
09b5d647e9dc18f67f1abd85b94063d4610435d3

SHA256
828da2ddecac2d29cc5a6cf154ac29f8d042af679eeb1a204b1ec6b683a6c2aa

SHA512
66de5c119e9a6138173881656ebaf217b26da99c0d9c6d5611c7680a6886a7745eaf23432cf0f7a313466d3932cf56193a0b0d8430c3a6710c1af7c39cbd8b70

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
20KB

MD5
534d0ceeddb44b229f42eff16c4d50e5

SHA1
680dbe3a1ee2b8ef408121964b1fadb525fb7e3b

SHA256
0c70edfb8202d96658ff2d896469d1b4eca8a7d5a7b7c3937114b4ecb7b263a3

SHA512
1b2ab8e1f238daf798bf36619f6d0901adf3e34f187141b9f9b90bb9c27155094b1a58c1c6b2245cf849679eca8f7a948fb22e72682bf4445cc99ae3bf88478c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
23KB

MD5
645d29155fa9adcba8910ff6a4af5384

SHA1
f796c9156491799940eab87b180df5d5b1895d37

SHA256
74a518b3eedc030412b516f4f6e81c4aa483f8da6a27929b799730e57913c986

SHA512
e2ae9af26126bf55b284c4e6e87693c60e8517e93c1ac51a60f995f4ac2b22efdad93430c9e05ee9a21b1c74d227530a5c950ee804dc739b14632ca4189820aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
24KB

MD5
d8fd9abaaf588da0f2c893d411e65911

SHA1
74e6ac5c53d39cdc56213826048e5fc1b24cc932

SHA256
345e5d26ac40c3156df4441b5676fb1ce5202db30e8d9bead130249a1a48f323

SHA512
9807918e8d200ddac39d2be6f9bbb4fc53a449f64229c5d142fae137caf6be0daba01195a914a1e133e5b89180be9bfe7ef33afb356a87a1b0e52dabf4243ae8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
dd39d2d8b352c8fbac9711dd72bef2b1

SHA1
874ad4a493a026d2e755715623b0428ec4bb951b

SHA256
73059391db1f3df04c318998df484e0b2b04ff40b30c6e93504ff2d7fafcd500

SHA512
2a3dfab30a66471bbd047d4e26eb078948ac96b8c6cdc774d687b175cfceafca8337f25d700d3f0eababf2e11bd170151e510e80474bbd2dfd6a5e0f72b39bd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
2f95b380315372aceefaa0425de8686c

SHA1
46a1a2a168b8d8917429959cb78295a952d41476

SHA256
8fb021c6d727e201e9f8bda6c6435c6ee4090f9c73bb908b79f3bf4b4f852d74

SHA512
a0e98c19fc270b2c39c8cbfad2b3df3e5612365f89727f5d8b0aef82b9ce37e8bb6d8cb07cb3a2c5aa5c0c02e81ee1bebc214e4b2b8cf9f6ef47fb75e76dc018

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
08257bb613a404209c194f0992b0f7b5

SHA1
f79067cb3b11ee661e415f7dff6f3ac48ffb1781

SHA256
a4c7daf966c96b59a718924ea9f60303847bd18b4ae6707126ed54edff6a55b1

SHA512
bc40ad174614a1f5861cc5c224fdba07e5a244d01c0931acf5ea17cb67d115f4e6bcafcb0e5ee31d6bf276d7a1be1bdaeb16fa47fdf5c23b0182770777cb40a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
e52705c308e0d320c20531fee00fac3a

SHA1
4053f385a9f063a7cf8ef06a95758b6c36cc6743

SHA256
03052fdc5eeeb6e84f2d9621b0d3a9a72a99ca4da0b70a09a4a9df4566595d41

SHA512
761c4058862f6f5ed0043a0b3e90c016b66a363315a834d0d70ca3e53309cd46cb9f37fc154a1d6fee053d20f64890c540cf88eb292622cecc8adfbe2c03db0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
e6fe054cbbe998e41941cd707b5d10cf

SHA1
633e67b877d6fb62ed849280ebf32f95e5c0d691

SHA256
5355d47d5acfd89a1c672722980c0f995c455deb8caa664634929aa71034eb3c

SHA512
882b0f10b05eb30b2a67905542e22910a04efcf7d3f1b41ef59c89928272b7da70c25f539032e08bcf7776b26d8c4f4ae2cbc910c07298c48f66a8f8d4fd4cdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
7839454b4ebafa1ca725c1d2f4340b43

SHA1
9a1e0aa9afa66fd63b9e5796191355e7a2d4d41f

SHA256
d53dc8f53e1cd1e23d7f36642e30a99cad3a9577a5aa6d4493ef2a5091bbeeeb

SHA512
674c7276740c7a2382d83902322041b870d5f8eef30891a317635fee527b3bd194dcb987d5ea5cccb9f1cc531e905c9342678dd1dec5e5750d16e40b4857e1d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
dac04430f0c5a03165b6b6540b10bf4f

SHA1
50bf0580e8bea62176ea4d1ff7ef3eebf476ed7a

SHA256
4edc2492039d119830d6a3e66f7f6a84a2f5cc376efc98345bd5a6f7873dcd00

SHA512
8d1675375dab23c949669231b7354597990b527533502af020663cc3e8e6d967d20d17e530754c0604303cea3d50afea94a95b34e904ef7afdaf174e670f238e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
83fb462156480b04ed8ead2af9dd4d39

SHA1
0178e215acb126fc4e640707287097cc2d56b6c6

SHA256
2b7e3c4e35404ab0181824803c79902169708cd5a32db50f0cfce37570b6f807

SHA512
fc1f9e8c2a5d8d987425af98647f5d3515bd97e4c5812ea60e9131e3377587ed69aab6c122dab8ef9a0c4fb0dc1e8d900f8c9264ba7870d4206ccaed941f1188

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
03112ec317fd9adaf5834079abab19f1

SHA1
607279688653e316deedfd03fe2e4a53e66750bd

SHA256
8294ef029b08d6e9f11dce3c04fd84966197474a8413a5bfe9aae1fdb8277979

SHA512
ba9b3874c5bc6dfe57ff56619af463aad0917aa64cfde8ff4bc983c48e6072bb6a3440f5b055ef3ddc17f6e4c044363f2f1cd4de5096d9f709b9f18d39be1906

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
5KB

MD5
0fe0cdcd04b0bfc3e3239776c2391bf1

SHA1
f6c67a70b0f580866e7ef1fe4ca1767441b95ca9

SHA256
d56aa8607dd0589ec8dcb62866b54f992a879537a02045e76c97f2358f7db072

SHA512
a142e78f627c761f33d84ba76810d5e1151da39ad7ba7cc4506fed5c7dd64605c58e987a7444cb1e11713ffcddafdba93a2c2ca77256809dd978b84db1c18f59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
9f8975bc2def95dc0de9b794110d425d

SHA1
937367b6338e1815058fc4438e00b349e35d5661

SHA256
b1587de9773d959c4df4f847875d46c6f494dc0265d0d2c363bad69c22c0660b

SHA512
05c03989b5436d95ecae0d454ce786585bf4279061b98c63b8fcfee674fed836cf1c9c47278b22c5db8267aa9a15affaabd5ef0783a4eebc8fd30b807a4b8189

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
4181b05b37acaccab1a47f47683850e6

SHA1
5ba030256fc273e48c43d01bb72552584d928701

SHA256
c7b1093040c2c99c82ae8183c2bf228db5b488755ffd1fc4646559de97ecd60e

SHA512
998756ead60cc9ee9f35fe5dcc94d4ce45d791f5f60bb3b50bccf923a874e74fe788aeaf2a61de8032e758498c245c3a2c2b02b39051ad9d8909810d63388f05

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
e89dc2dde5091c8601d597319cba6909

SHA1
9f89cbb630e45caed513b4a67dd009ac0fe7a979

SHA256
b481fd7853eb85dff7fb8ce769915dfce08d44d5b2ea4473980411ff0e3f9d13

SHA512
24f2a792c9d44604c4b8595fecb6fbdca7cae627c3826e4770a5bd6579dacea2c9fbaf637476825af00aa85121dbb5789955e32d2ebf689313de5eadfa0db38d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
1bcf67d51ac68f69ab14bce79eb6e7ba

SHA1
e10393da48ed3b22f1ec01cc21dbde6c674a02ca

SHA256
8c71b0297d794f80b2cd576bcf24c0d842eaef8f5e096e58f87d1990a0d39145

SHA512
8badec4a604c024ba317b6f165adc9cc5dc13c2077b553126466f9029c59d17734327000ed056ec2836c3217d21860b5c4e2ad627df8ff048b409bcb88a75c5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
f664e9d3f2b55b1e2d31f4848da90ca8

SHA1
d4b3bd01171ded58962a5817dc15353550d11c2e

SHA256
ea0a90ebc791408e3be3c8de233870ee78454ad9a8b745f977866d37a16ad6b3

SHA512
27571868ebc9927d8eef48fa95086bd9b3d9d87b0bc61678b45c661487659b808d91703f64999e0465b486c0d4eb6a97cc4aaf79f26d1dffbd4799a994628b7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
ff43c7f20674cd432817e72721847f31

SHA1
f73d1e9d999593d2a6e6afa283449f16e69384b9

SHA256
3dc146f9407c59525e577ef4b5fecf27c36a59ce40c34e4bb996c7330dce06ee

SHA512
137cb5122d44198d7fb1cdef514a9516b3c86ca737c0fcec7ebba9bbb0f82061dbad46d6a4e439ec2dffa2f1b61392ab59f3aed5c4b80ab9750360c8c25e48e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
8b3f2d0c24847974df39156042a2093f

SHA1
d841d261715058dedfcdfcdc7a11b48fa7e03363

SHA256
f2755fe60d8b647e9c87f7af36dc8e8d6ed48f037120aad7204be44f8b57e574

SHA512
aaabdf10702b8b522f3d39b90c29590cc4b53c66827fcd8f650c24eef2be7a6b432eb24d1e267d92ebb107a6f3a360777f27c0e7b97c0f67be7853d042477951

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
a48674c71e5a4472821db773293242b0

SHA1
9dcf8dc033e46210ea9991e95c3b872d5db5b190

SHA256
2f24be6ebea72cc98734a0a6163c041eacd3bfba9e531413631053b720435595

SHA512
94a53614defd5b59c9ce6ad1fc93a69336295f038a598bda278933a87e74ed54755fdd595066db4f86d0abf0210e63c9063095b6ff0adf3d2c3c93699e93e19c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
a2d88a3f9c62ee6064809c8fc8b90dba

SHA1
a38b8384fc7e2a15a964426d78fb144761e03f83

SHA256
da85f28574c4863be594f4c90c72c87d9c2a8eb2da048abb860cc4adc88c6f56

SHA512
381d6c357fc553ccd7da66209d525d82ca5a8e981cca059573476c4f49d4276dbd75ec46a5487247adc707b5eee15659b8e304e06a6aea2c3d2fdfeab45ea6ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
233a0050c7c0fadbee396ecaa34b1fc0

SHA1
21b58a7f27e14ce7d0201774e7108e10ed2249a0

SHA256
828dcd576cf03134a603ec81510ffee06201ce146c80ea4175975a82ba037bf5

SHA512
e8e0e5a023b3e20b11cc883b4748124a78bcf99d51e5d6f1ebf781dff2157e425b052182bbd561c82805d527f05946caee5ba8244f2d11db02fed959a762ecd3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
4b2262655eae47918ab5cd3ddfbe8ebb

SHA1
b9a3bf0139f553ec967cf1933471acf84517d013

SHA256
655ad32710dadaf6f2e377bb10b801b6e964ae94e1bedd9ddc31c40677f73fd0

SHA512
72747e04fd1a51e5f2c46ea126350e6615f3d353229a26f96d9b2af0a0843e182308a161e37cbd6737227b665e54b9814aa0df5334dc7012dc6952cf66fcb98d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
8bee7aedfeb981a506bfcaa4e7672fba

SHA1
276c6f05aae23073f624a2a3b1703eda0e246117

SHA256
b429e52d2743396fd3f7186f9693ed3ba7e57ff9a1c2ece8caa9997bd538125d

SHA512
7ba56cbbae0ba9db8b612190e429e7821c26914ff6db221c47feb4912b405b1281c4059849f0d1046f92b548f87eec665b2ddfd5c55cb76c0a6c76bf91eaf7dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
23KB

MD5
7cd4e159710d734d41c63f591c189bf6

SHA1
66f5026116e2cbaef834703169472caafa1401e5

SHA256
e3c0064bb393ad00960febedaab9513a8e31070a486448a15aaae00f1b198f77

SHA512
5d673e6d02581009606c66ba872b86c356153f8ab4a0ed4be14c2ada2cf08401eb6739da89ffb7dbb9a9e1b39217e9ab4e9b837639821fc0f4d8ccde3c09d506

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
23KB

MD5
8f64bebcca68de635d3352d9dc2e272c

SHA1
225adf138d9a9bd9eaadb5976dde5287fc6a7408

SHA256
217cdb8565dee6b9b40439db1fadbcb9a7fbe58c724957126adc71f35148ba70

SHA512
8b6946ee505e427cc34662fc216e1e24fefe1086a676dcac5753b44be2a4e79ea0f2cccddb8561ffce3e0374037819a40776507cf57d8dd5a843b851393f80fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
c2caadc689a5daa2813c5c62f350a7d1

SHA1
6aa6a8718a32e569788bc877ce63ef5de0f535f8

SHA256
0cb94dfbeada79b9efeeb6ab3005f23c9611bec790db2326cfd2505c9ac0bf5a

SHA512
d4d0dd54043ee01274390cb716c900d50be9ab097b1dac6dce6c943e849acab18d9271b500e41216fefd6385ad31edd6873cb9adf2f605f2071141a7e5e96351

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
0d49e69b2b0961fccb0f44418cba601f

SHA1
cc859f440952c25b755746f47918f17df438cbc8

SHA256
198f70b3a4632866f2ff2524653548fd8dda50bb116396256a6fbe453f355261

SHA512
0ddf4c1dbcea6df8b349eaeef249b6a5c4265c2145ed53a77f6a93bbdee97e48b76d8a386b25e9e8ff91300c552d23c894b5f4e6c5629fce69a5858673f15344

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
d8f1dae102725a94c812751fb2c63b57

SHA1
c6e107624c1f52d412c8c0e08606cf3a7b97fbcb

SHA256
ae701457295648b5a835a5f4b0ac6bffb9f3cd43a93db7a4fc3c35e3e24bc1c3

SHA512
b909222257acd230cc90161a3b69443c6009e5fdd0076b88375fe031ed43ca7cfbf9c2ae31c7c743ef9cd6bf65a6998d7564cfe646b4e8331b10b3cfd17d030a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
be8156edb859a4bd8d3f26263b3b3a9a

SHA1
c409428c5ada1c1241b64357ddbbdcf111db5957

SHA256
39775edd01664910c728870cf761681efd02be3af21ca63a7da43351799727c0

SHA512
974b9fe5b5083133a8455c1b6a6bde576e6c887bbac21b5912e619ffb63ca75b71d13fd1785a4f40d29163d6a1ec0e0682a663292db1e64413762c96c82f34ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
53c34ba1cc3bc912a634b1f5e527c235

SHA1
e2945b71f5f9965e891ac28d12c5ab0a4bf04e92

SHA256
8a6e76cc4396690114d64be6a11c12f5057260b64aa07b0c77f9b847e4ea1bc7

SHA512
f83e9013b0cee9ac3ec8368880bc778ccef1f81106bd560b4a50473613d4aa5603a26d0d1c1a63fe91e249e0d4ca635dd72b24762ee263a9f35864a8d8b0c4a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
18KB

MD5
3dc6de5fb1b09529c3aa2d05267619d1

SHA1
f6ccd7f00b5d1928270500cb4b2e38c932482406

SHA256
e0b34ccc49d9ff722a8dd5f46aff21d8c40d5636d5da057cd66afa45b7eaff99

SHA512
7cfe2c86e81a2ab326a3d0cdf3bfe7a1f456121c072620fc5fd7ade7572553de807bdcc69ddfeed1adcf01232a5a2a1b663b0d0de301713082e9b5940c957e6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
17KB

MD5
4ab72268c4897d5daf535779d20f5b3c

SHA1
51576d0253f0140602c5a4c0c65b6371ccbcebf4

SHA256
3fbfffa7ecb79345336b72fb31c78e022f4099644edb5f90205b9c2f5d3486ba

SHA512
d71f97a1e155cc6cb4aac6d692bc0a13d23301199d48f4d4dab60845b07a61f831598a84d34cb979a952f95e6dce63389fd85f4637d3bbefa6e5e32e94c77f89

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
23KB

MD5
dad0de9f2c8429a99c9f0eae2aa3e7f7

SHA1
a521ea5fb3b6c82902c599a8d3bcbd0adb165ceb

SHA256
5f45eeb631a87eda7496414e519939062b4349a7cdbb93aeae0dd7d5b791757e

SHA512
21518f94ea2742819a02528338f6f3a38fd0ed5d020b0e115729e391f9b7e99bbbfa1b1913a804d386778a556b6532f2461d3ce5b0cc933cd8f8295bbf7b91be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
25KB

MD5
9c16d97924caa956d3acf2bdad1a723f

SHA1
5808c955d5dd4aa593903081039769a4ff361063

SHA256
e7ea9f1acbdc127e093b1244e2a9a1ea08bf67903538a7b81e618ba27916df45

SHA512
b2570481691d7fd4a6be9148a79049d4bb142b37f1c75b9204a0f11a8a8a11110310165ab5e227b8f9ef85bd15d9b65f0833b0ea0e3ff1b701c7c4fb81b8523d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Filesize
24KB

MD5
60b345592703258c513cb5fc34a2f835

SHA1
39991bd7ea37e2fc394be3b253ef96ce04088a6d

SHA256
7e358b4f7553c9385e8eb2c5692d426bc257bbd4c0213e6c69294459734f6300

SHA512
0346fb4096eb285ab0fdf7e7ec38c4daf7bbb0c506f09975eb2290121d169a34c886fca342c3e06371cb697f2753a697ca4f72af7817ed340eee6063897110a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\a3645791-94d5-435e-a2d6-a99e9793c2f4\index
Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
2ff2d7c4010c07c49bd1ae1f226e5845

SHA1
11171c9dc89a2b7ec893c6baad0ae27e761fd3e1

SHA256
aca1878aa1b9c01cf57135aae883a178f727b802c4ad931b76f5b53380b21c27

SHA512
40742dd5d20220cd86220fab6012f6585e5db37441ebe681d1864d35456ae27d3c2e102da57b72b94fa45dd76e4e35aa8fcc138b5204cbec12d56b7c68c0daf6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
26B

MD5
2892eee3e20e19a9ba77be6913508a54

SHA1
7c4ef82faa28393c739c517d706ac6919a8ffc49

SHA256
4f110831bb434c728a6895190323d159df6d531be8c4bb7109864eeb7c989ff2

SHA512
b13a336db33299ab3405e13811e3ed9e5a18542e5d835f2b7130a6ff4c22f74272002fc43e7d9f94ac3aa6a4d53518f87f25d90c29e0d286b6470667ea9336ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
52d30cf618aa463ecfeb6665c47de18b

SHA1
58829c9fe30470cb671c8549f2ddf3f3f5be6db1

SHA256
f32e72e9d0458afc757e315a57a7aeb5cb724055bedc40c416d1ffef12097b35

SHA512
0d956e0e54db9e0766b9477b2eae0c44f7e72601e76a04d2e1add55b1e13150a8fc2b0fb55fd5f264fb0c37fff93476945c2461837d44df4fa73355d197649a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
da204b1afb387a9debce19a626a83558

SHA1
6836839a209fdf15818c8c67034edde1962bce54

SHA256
854d9fee111e54817962892a330004b192d6e6298a3ec389f36aed36827b17a4

SHA512
5b13673c8795bf89685324d0d396bfc895579543fc4f77197e5c54e2d78784da8cfbffef20dfb1e3b0453b61f6913db13fdec524d7baebb7a22d90f48ca09b7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
bbd89779af78f65a32b161cb1a04d6d8

SHA1
453c77b3cf1dd1d684073d35daa98ef58fab6835

SHA256
075527daf691a89f24e5dc06917a1280fdb99c126a38a992e1415cd4e7f8dbc6

SHA512
be14a565407253b80b9da4c0b567ae9081d4af3c590ac3f4922474721feffd5c6a0b4779c3c04c8b59e36e4e4ea96ddbef01e3024d5c3e302bac9ff46ba822fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
e902bf02422d1f8c20c8fb9a60bc4b21

SHA1
f3c26f0ca3b3d73529061d392ca54a56e333ea9e

SHA256
75cefa7bbb4401fa8e0e85e8728f429920cccc38260f71334649c2c17bc5af35

SHA512
d6fa8cd002b17b65e36690e6162e5219524f698ca17fd3012569bd0efdfa59b62b2acffc1cc670aa58ff80c344d54e7204e2ef9caf3c91c8fec632ae808c41b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
c68396536c37d640387262bbf35bf37f

SHA1
9fc7642aeaf6fb89c19eacc121ae6f077d935d0d

SHA256
2ee21dafc691d9e1fc32a050b10c0458b9e8669b0032ad2903ed9835cbfe3d5e

SHA512
3da717969c28d7f86b67b8c8dfd887e75d5cfb099861b6c6ebaeb03c4b8e0bea9777adff3efb333ba569fcb67e444fa25878a9ae4b35e239302364dc0f3c4278

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
98d25b3a7f616544dfc7dbc1bd02093f

SHA1
39ae3964407e5d9a1c58d2e0a68d82fb2481654c

SHA256
213d185b2bb14a3cc55df4cec03319859a7898c6964b43fa7ac1991c4b931307

SHA512
af73af94ce05a62cda3a240614056b0c6fc87195dcca0b1617e47f702a6cd64430f179229bf9d40442a5d3552eeadfc3c1cfea519cbe40271b377f0c22300236

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
85ad7c3edd89ebd701569360ec90e57a

SHA1
35c98f20db3bfb68cb9b6c5c06bfbf5d102c91ce

SHA256
01c86993547bb3f38c9fb09da9921c817f9169ed82ddb91ddfe68b38ab014b07

SHA512
90b430e78c41aea54c742565a485fb4960ad7f922a63a51f7e1e1ff9bf418d78ae411a23dacef7a243af8cb2b3190d19acf1da352d3bbbb69875e79f58f7f0b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
b2286be24b306c6fedfd1c45f906564f

SHA1
b7697deadc96a275f44a8e21ac4a3e39220eb1d0

SHA256
782f6c308c2f628a98b79d803130c30215bd0e78e59a79fdfb248399f3c28dc3

SHA512
97c3dacab66231e4b2ff65343a6bf045856677e130329974b9f19240d36d8e1e4e09bbcee204d031d8b858e72f795556ec65b38a0cac844c3b4509ba2f9a9911

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
7e1492c2e61535a0f9abd29cc0e0c781

SHA1
3a7b9a8c6ad297d3e3213edc910ea84b7366f918

SHA256
13f5262e8ab06d4db76a09df9cf389ce3068e04f950ec4cf6305b0c4218ee355

SHA512
18d1c5127ec2d2e72e17f2d46684cb43e2199ef713ab7051c3975a034ae46acdc5ed696693864f571429fdb84d8c5269754e1f1aa423c8a4d551365c467430be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
47618817887fe7cb530f15a6e808e7d8

SHA1
5962f0c70c76f121ad0ff4362b1ccc342c3f52dd

SHA256
17650726e51a0d220ecbe8d3cc3792163a816d22b61be2f3677337206c025098

SHA512
fdcb6dde95cd0aaf4ff297a5403d8b256541036327d335682cbcbdcc1c3afc3db588fa760480ccaa89cc3fbcf52b8d9502066fa289cb79bce53635faa79b2288

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
cf0f4d581f9c1f36fb59b5b8e9975e0e

SHA1
64db9e22b9994fa4782ebc0de271ed0fe6516223

SHA256
0c4936a04b304f1d0b79917469b64dce2bab15497fb653b36db6b51197881c87

SHA512
31ba5fe66a53fb6b471b60377c5d4c86f4f2979c3d2cf692c7a5fca426d279b3e0f1cd8381fc2f31694d797b388cdd815c6a955f9294a4163ad82b92c55508fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
0f1fb66402cc2cdde7dbba4b877ee62c

SHA1
18a8351e25dd205bf8e21a82081da4da83b698b7

SHA256
03d36016674313a37df57aacd1b9b1160b13f6416ae45862f008e6781a0d082c

SHA512
e68477885d411080aa86f4487d070887d67005db4ed6748ba3e27a505d9f151b9b066c895450cda5d69f22de22bdf3624f4a3dfdc15eb587d7c9e91b1f73068d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
6acae00162c3035f32bb6a0365fb129a

SHA1
2a0e8b454c5d738aeebdb9c365c0d31f07436033

SHA256
1c31bc9dc31004e7d8107927eb6e767d0084c4034c4c0eaaa4245f12e96c61d9

SHA512
054c5f7fdbfdb092f72aae6062c02b734bd0100c8a77def1db64a58c8418b6d16ad69e1de2cf0f7a675dd561293dfbd583a1ca2de4d9fb70c041d06096ba08dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
7a118daadbafb6b026aee472c9cc43e3

SHA1
adc23e38a25a4486523e29cdbed6f2e0826a4897

SHA256
f3fb5cef888c4f06ba255f0625585110b721b8bbf86f081f7f2bea7fac85ac5f

SHA512
482c650ee124f657b05b12aab01f30b9a06dc49c9e2bb46cb478d5ef7cd8fcc22a09756443d73819f29dcc884f0bcee5a0cf289a5b99998d8e1317260af1b808

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
02903374acb45e5af988213540c536a2

SHA1
453e80894031200345f1bd79dbb14af1bf70c475

SHA256
4b9268499e60ea282d2b1e18eef92a68c6c92da4b1de9938db45cad0d1f54ef7

SHA512
2f1459b6f1aaea221d2728d8a6da85a33ade21a74d7a9d4f658c29a3de50a06319fb032b1a8ea47738ed7c61805292e9c632bc11f3d1aead93f17ecd6b310722

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
3d2734489237ac3031af8711ce6348ed

SHA1
ebee1680992ef59a1351473dff2ee9b80cfd769d

SHA256
63f1a8b75c581d567908ba3c27dfa4a4169c9c4d69b99b34e7af2f9502a7fe64

SHA512
b9d68a2620b2436a4ed962b59631620946930291ef257813322cd243f4e189cf5c36ea9f0ced228ef67ce51624af375bad75e2bbd3c692358326de51c4f2ad39

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
b63f97d76a2c9e62adbe688dc1de94f7

SHA1
483e6e0a6c8576ab0dc8a0f1d70a4472444574c5

SHA256
24dfd1dac6d6d791c9a5751ceb9c8f30b09105f552175e3b30a5cc7ce9669750

SHA512
82775d8d53e610597e5f4c7cc3efed47274646e16690391600d7fc94494a37c2ba1e49c95c6037de6d313f95a087cac1604b3ab809a839a4f4fd6ea991e2b23d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
a16d05c189971a722b13fee4e795da08

SHA1
1186a2d327e6c6798bac5df9f65048d2127e4316

SHA256
eb0f88ca5862e1e782833cd9d09da5a27ba1522678804f1bfee88e8ee2474b1e

SHA512
c6f61df54f108d42e707c23fb09825d278798ab781bf146278084dcce414c712b99fe3739f2536a31345d3264483d979364dcc145ae0fe0bb7c188b05a31e39a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
6f00ddc00f1e0021ecf6dd82f03d17f2

SHA1
c5c7938ba48d98eefcddf611c5802800ef0632d6

SHA256
f9eb5a2d6c58317137dfee5a6542287533049f7e08e04b841bf5709d508780ca

SHA512
17f8063e0ebab193439177e8cdd2ed503286c5616096b79862ac3d5080d81d99bc0d4845fcfa94efa28b793966693e88a68ac8f2cb7cf5c3c95659620f73da9e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
6a312e03adc36bacbc03bc7c7916d86f

SHA1
aaecd7e474ef80541e47435d2b1ab530887d1c2c

SHA256
faa21cf0402f459975c7b3984edb693fcb14d134f1974f9d6156caef0814d672

SHA512
8281e3475afd4eaa0210c7f4d99650618932d0b7b31c5c0adb57d4ada1ba76b615bb21b2ba787eb1fd9f9f28c96e7e8305499eb2f4b673bdd85d7d6b47a839fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
6ebf2a0245784241e85cedb10ad47d47

SHA1
14045d4b5654c58757c60d4b6c0d5c6ebf7658a4

SHA256
f1f3ee460e0bff5338e5c45079ed8dd23c107d01f4d3558be912ca64029a80f3

SHA512
0133b401b7edfb6e99c2b65aa3ab3d54643cdde46861d413454656758d47febefd6c1fc3f2575e6ce6d3400dd7eaeac6e323154f5971947247cc1fe8e7cb8aa1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
18d652d27b7cfae0b48a6c1fd245fe8d

SHA1
0e5f617662201ae92e7b0b3279c14a766a0843ca

SHA256
8f661a449d55239413437070299bc9c6de5160b48dc7c5a81171dd895c9ee004

SHA512
01db8826ba20c155f7d79ed7d3ca69d631d2bc65d1173018c1d7523965b0a39d00f00ad6d35f78dd6739d40db3cb1bca8836afde679e064f6770643361bd6d8f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
fe716791ec050c4cb53a0b0056a4c28f

SHA1
1d5b9839f897b9eae4648058ba5c17c61e1f06fb

SHA256
a19ab992d59b37528409732e5e64a8029d42e1e2b58d537b45962fb2e1872df1

SHA512
27965125f644620b3b9f9d68b6b3b7c4230739655763c27d5a0555aba60e4a2ee872342b5fb755922b4cafe85767b43c3f669e022cc7cf3f755069237b18a9c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
698f47e4850bbaf0d9f01db0a6cc8a85

SHA1
f9c7524ca351e820bc26f635eab3e361c7bbbbdc

SHA256
76437a6b58052abed6e9347eabf540a68ade2051609f9e817279255a7f2f5674

SHA512
a8e36e9ae76dd127a18a655b67319b02493714dc9c3571977bff5e0313d1a14af74f9899c241b35ca57ab2de44918b57879460eade665eab352e17a1fdd382db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
e810d33349ca4cf9505b5b252f3feba4

SHA1
c1aea58cfa8e386a66460af5cbe4d387d95d651e

SHA256
f54d32568d02acd5a607942e6a22b3b43cd179ef5bb4494958adfd1a6536dda5

SHA512
bc983bea34101f168d3dfe2be35d0ee4dac91e28ed36e083010e72b8be56a1f60091a35e136f2da95ad6073b80fc1d69865b20f509b32715b0340aaf27ca651e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
3727c4433b355000b4b80255ce5bd0e1

SHA1
e660525102929a0c54a300a5d12e128547370d42

SHA256
db747017ba23195c3f5e1d5f2f2bbf1235ea935af29b3103a4c454074ac7c7a3

SHA512
ae934b168aec1f0f6723dc1d59287cc7609d143c63b079f40744e1ca492a370ccb2dce49b81f53de04e869b9b440c483ebd7e57ee5870c165b27f1ae6355d56f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
90B

MD5
80adf5d5be6547299237f857a9ffec62

SHA1
94a83c4eaa973d9cf0ab8c769bd3570d3af4e770

SHA256
213088a7d418b807567df2b52d4915d07d3563cc88193bcdf8f10f775e22e076

SHA512
9c19a28f4bd56f6efbc5b85cafec783e4926961faab0856fa815221f17057ca81430be1c4ae0cec30e58eb2717d87a4a67fd30437a5da037150fc65bf48a2c53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
83B

MD5
b9c7c9d5202caabd2984a6241357ae72

SHA1
d1bb61cc2f0d799cf536edc1679a3ddb1e145b8d

SHA256
7c4e410ec0d5801620564c05dbd8b1e9322c6e95c2728aa3950d3ca521059912

SHA512
ee32ed134520f2399e56a428f232b9a164bc32e7ccd5ee1f596eda1bba068c87d0768ceafee81d55b88ba99d7ba2bf99ae4f450bf5b279bc8201895ed0caf4ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
83B

MD5
9cdf43194546b6b25246a44cfeba3e2a

SHA1
8ace205864bd3a5076bd8beb56a21a7c4384d09f

SHA256
9eee52092f40ada8f65f0e9aaa6021be0d2f658e75d3e66dec241fea1110fdca

SHA512
999b76824eeedc91b0dcd9f5889d42f35311be982605d0618a04db7e2dee9c528e30252d0330f76def211f51fec489f414a715cdc7b7082d03d9c1c31cef1d45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize
83B

MD5
175bffeb312bcc677722ac1bb0d4f09c

SHA1
c3d358a54ba79e9cc6e0dc9831f559e43f8471ec

SHA256
2350909caa5d6f66b7ea8cbfa65c277f0a6018c372120e0364497091c42d723f

SHA512
75afa8918a148c0240b61fdc4d8b2e1c13a2523866242efb2b1af4da7e5f0bb7301791c3fed1a39187a221eb6c265c201f0daf50e0ba26b914fda10a1400f854

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\41f55cdc-c125-4275-a45a-03c88c507921\index-dir\the-real-index
Filesize
1KB

MD5
4c659cd3b9249c5e6060505ca259dd47

SHA1
20b462389b2759eb8151bb85de19d32367338504

SHA256
451d37897cdeb675af3987a05bef32333488c646b31e88e440adb5f8c6639a07

SHA512
b50ef347f673fb5551aed008f3e06f8e3291a49832c3f14b48808b579ddfc3f13e63a473d114beda999d9899a8c3675c12e3bcd491fb725721ea7392f17f9afa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\41f55cdc-c125-4275-a45a-03c88c507921\index-dir\the-real-index~RFe5f9a16.TMP
Filesize
48B

MD5
70d279042d1b6dcc00eb452fedeafd70

SHA1
31c5856fee49406113ea4e218979b34255ac3dec

SHA256
0f038e8941fc750065d982def584c314d162af4d2c5c4791047c77a574960210

SHA512
681cb7a4b38f772e0b48e49939e7582507ac87a4c1c4e64989bac99882ed5ba02ee19148d5447d2e25baa132dbd60462665c712c37bd5549295e6fbb016f07ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt
Filesize
115B

MD5
7f35e943afe64b42281e82c767cfe190

SHA1
79e34575f27e85495dc5eb4380529edd49f5da20

SHA256
72b4058848054e5ac10a5770014ba3afe6895adf293a4763eb8a008e184c3f3f

SHA512
a63c9a0a676f941068cd30dbfb8d98b907ce93949694fcef6df62c1cb7ff7127edd7afc437033171ecef6b830a2d43027cd8b36c68518258df3ce3d1fc751f69

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c5ce88bc72edbf8813410e12eaafa3c8e5ceb644\index.txt~RFe5f9a55.TMP
Filesize
119B

MD5
46a8a570e2cb4f75ae693bd7c9585fcf

SHA1
acebe39b302094c12b1ae8d25bd545f6bde9f9e1

SHA256
3c887ab7369a059004ebc5dcf256fa95870a6da70953823952cce90cd8795a06

SHA512
dcedc590d191317077fb62551f4e2248da9f0c767a275a9f8eb24936b122b5634f87bcce755972757f1c2af71ea82789bdc20db48cb6b84a4ae50dd238d8c847

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize
72B

MD5
850b1784d843d686fab84ef30b142d22

SHA1
5a25f80eb0746d0521018305850b00fd47c92a26

SHA256
2961524352bbbb23b8f9b1df92ef6027c827fd24e3ff187e52a5245a7e995094

SHA512
37e4cecd4bef38fbb2de8b8e239e997ff0627e2be6a396fb95b156668deeeccdf14dc23487d5e56322f8c4ed6a5d67bfd03f36694360eb87dc84ddeafdaba182

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5f91f8.TMP
Filesize
48B

MD5
b4f0b9198bb1af05f3a61e38180ea8b3

SHA1
7daa529da0d11584067a89abe8677412e75b25df

SHA256
b76c02b7ae5806ed296aee2fa9e682dec70907381fc5bba13d008081de36bfd0

SHA512
fbfc325901085aca3cecfd4f128f2817cd7e96afb59f1c6a2b3c59905eb7d2d9f9af852e2d766e915b67859b7896e1f9678af761fc30bfc152b2fc885c7283fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENT
Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
372B

MD5
88b24ba410b118bd77c2749b376a65fb

SHA1
6a2db3d585b0373e78886b82ac8ba886ca4ec752

SHA256
720ca28025cf66bf5748f1f4ea2a73e14373e19c8a4f5483254e56db1b625057

SHA512
671e5bc50564e06cd509d0f4cb477800073bf9570ff89b12fcb6a5c01c5c8c9a688f2889ccdb467380693abe932876e626e211991ac017baf3d2615ca5a377c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
83777e55646b429972e2c2b2634878df

SHA1
7a2e6f94c462f594ad30b6c20f511889a8726b4c

SHA256
986da2747887d284380c06f651bbb922a9dd0885c085d3dda8566df16b3d3470

SHA512
56034c4723916a2005040ba394bfbc05e4ac432d6dc996d1bc190f79b190a7da0ac200f5a2212b6d1f7665630e9aa345b456ba195960d92ea74c57176ddcd6de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
589863223facbf0631f00fcfa594ae99

SHA1
47352f745eca1a635bfc6e3647fb195713d7541c

SHA256
a5638ed5b5e23917b688524d022d7340ebe0f3c57ab1a0b4f6670cee1024ffc2

SHA512
f93666b397bcb60197119a1f3e41e1bd47b01006bea49847f2e42e6b8eac6c1f21f861a5e75393ce07730e090b034cade17f27dc832ef2d8843607f2f65b0c90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
7e096032ee40cb9f4d82601d63dcde64

SHA1
7db3af73d1aad90ba2d8239542b5fa6386319204

SHA256
aaf0b6de93298ba259bd70121e6cf86db3ee70da90edd30520e9813a9a3807b7

SHA512
ea3ed7a8270078b0ab1198c53d6dec1317dd286c84e6446ee8d43dfa951b08c58aea8f875082911992dc45c7aee61c0223e5f9d3abc1588c05ded0912597aea5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
7KB

MD5
79c0aed6a7448a5e5b990705682c0c87

SHA1
4c64fdb3b010650b35d5ebafe21f84871a48574d

SHA256
dd772969761b17054cddaf280ec2019daaf07b05829f44ca3ff8bb6f07998d68

SHA512
7816d1e062031b8ceeafe0dff8e85c3a6e4bea21e997601e1e93620fec67a19ed87b1db48bc4b7b9e97020b43ed3b5bfbc239f69d9d2392919eedd7167202e40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
8KB

MD5
9a04ce39695f873dfbc571c5020a1c0d

SHA1
c33f0e4df2d228327c9ec2d42b5d30074eb4e29e

SHA256
9efc41ba17d97c51759e18b7ed254dcbc7002e5da0024601d339a231f966fdc8

SHA512
f59f274af2e0208d923b71d4fb4d70b241e7cb54a3557e6be3b8a52a068088f52fc3168ef6848d83c1fb80f598ab0e13b63565b6027d6a4fb9be81913cf91951

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
60dc8f68d4e016241605f34e2aebe89a

SHA1
a19bc9f942e1eedb8aa2617a356abf3884f6a4f1

SHA256
ca8534231db4143be6621deb0cf2f72df9831bfef6f9c27bc865321f6dbe369b

SHA512
13a58f51e8eed91f2431023799aff3a22a488f16e103bb8766b2a4d6c6976119b7a9d93d8f52aaba1c9838ff06cc4189348cb59f87ef4763fba725a8ab574498

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
6effd6c0e78e67c23320c90f705d7f44

SHA1
4db202a23cad7f6ba8ada16132896cf1f0e237df

SHA256
c27d783395bc4d8c219f5d4709e4e9d3c802e78c32990be380262f2ae94ebf91

SHA512
43965bf79cf23102e2a9575bf88578b30ec8b8569ba9ed8d8122cff357f50b133cd3f52720e1e38e167b36643ac2bd0374fe98f83ed04ea5e961246dd1637c19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
9KB

MD5
b32194fc4730235a8484e62801535952

SHA1
9f28db1af4b47655bf6dfaa8592dbf2de79e5110

SHA256
715d05310053765ab9c441f7a392192766ff3ee1806f9e1f16b4b8b0e2ffd9e0

SHA512
d2ceaaddf767ee0d1097b72d7159b950a2ef73251da8cac4e59f096bf32c31aa6ef1f83e2cb96188d17b26ade0b85a5f98968346aab68947b648a00902c7b983

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
372B

MD5
920f9a393cc7812927eb8629192673e2

SHA1
05a587297431da48d4587efc739ef718fa7144de

SHA256
4d8f8265d457d08e9f4619717cb3c42d530768531cc46956aae9f4c3e8ede159

SHA512
8003824f153e4da9590e5c7d13a1c42698da11c4520ae6e3744745e66116d4fb41bbb90d93facd73a0751071969abf816a262f3939292650cb87816334868eac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
3KB

MD5
2b55d645e85024106644c837b858306e

SHA1
b3f314cdcb92666d1eedd6d981d56443fd549a22

SHA256
2bff32d4a73b2de24cd4649f10b49c6874d95adbefa92bc9c021e35fa3bad17f

SHA512
1f42bf279f6d5f3d70e912cf01d7177121059b6fd4972644467c53cb42defb0b3070866b5037cdae2f72e291120af5168660d84ee3728489d059f25f34af5231

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
368B

MD5
1993e671a89ecd1dc54dc656ae7fa54f

SHA1
86e033c882d248bb585389d652f6d91e3dfc8f1c

SHA256
640fe6020f24c029407759d42dbbb13fac9a6b03cc58474842da082132012605

SHA512
813beb9c552f082ecfd4d70a298cb8995fd925d8eb0fe69b9165d0c11489afff0b059c9df26368e976e7e7040a280a5d34a759b93599845c39d720dceba1a514

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
221ca72b65ff15d3c7e812bb347f90ca

SHA1
6ea1077ae8af315daff753e560169f649fa5166d

SHA256
ed46a79562b13122241acb82f4fe190a738c31f4336573fd57c1e5cb531feb78

SHA512
25fe073a8a9b95932d529ae154c7f69f1277291675e0a3bceb9587a8e2b52aa93f7703d504fc90d492aaab410591811ebb66aba08082973be7d363aa8aca0fef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
8efdc094dfff4114703d68078b8af59f

SHA1
8f982cb37099bfa4d58c62447aa8d16def695618

SHA256
e48685a5598c5d2efb81c2f6ef351de1acd1614a546b45c6652ef0c6f0319e77

SHA512
8f7b36d3b48d3b55447700a35f5a5d4ead74b3c8b3d4ac5e6df1b648a3618669c9b65e7de6942a6d71b2dce5cc85e05781d57f5270e5a94648551192bfafe784

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
34ab899e63bbd5a3a91ef9be21e758be

SHA1
b595c4d2a7a81bb4c3345cbe193cca05300852b6

SHA256
28b03d97531c5963d47e87c84c6f75dce98d70bca6898572dd2a063c8e7656d9

SHA512
0e9db216999aeae74d71ba04fb157da8e733fbe02bb213fa878233482fc12661f8845233b863ca6f6ddfc5ab1b7290acf69cf19ea1cb86c18f9220eceb975a9d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
e701fc948e3d9c396efbeca68d8768cb

SHA1
09b965bb64d632c3ce1c256f945a9bbbe58e464d

SHA256
f19e26fe61a3a1f05dc23352818cb2b6f1cfb631d1a63901c7cd174f19f208c6

SHA512
bea1e9232d14e914d4cb45862e8185f8def4fc7c6b1719ea5c292f51068a184f86f8692b5add2470e4ab0e611ae9e049e55d44ee58e0c400f59742da7d54e6ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
d2d9afc0b8f8a1e32b1229f413471543

SHA1
eb4fd1a33b1102abbd85714a9e7dfd94c06cc8cb

SHA256
26cda6d1f93303858c2d066e94746cf33fe3ec3fc82998245416b6c79d6ac160

SHA512
afd8bc8811c227727625a4a4f37c6f667c9fa31f3dfa62dcbbbe93aa502d4778c78d7c4f6fa3bf6de9abc414dd2a8e373ee772fa030ab9cd06cd03fe943caee9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
f799bd5d0088a83b3435e9ccef813a46

SHA1
c5e74be6f50b98181ec9004cb82a82c0d35c1dd4

SHA256
432e4fd1c2c932b52bb12ab61147c0bc149a3d741d084688cf03539c784df534

SHA512
53a8f6da3f15ebc827a5906d35dbd7fe6e2fd4fe75c6b44e98e2491752538701e50ebfd53f116796ac19a0138307ec7aba05c19506ebd9ade44d52fb3f9a2dfb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
796a62effb7091325f6c569629d172cd

SHA1
dc73bb825c3ecd24ae78ebad1e59e0ad09453039

SHA256
5f672fe34c0fef3e215b6e942d6340535b9c963d496e1dbe67fd17d2608326b6

SHA512
4a35624029379676d032a32c75bf17163bf7c3bd437b313c89290ee630e8cb465618b3f581914cbd63b5a3c66a1bda00e1396dc8280b8e2dbfad5299a34d55d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
150d92782df6f2eb9c5270c4649191ff

SHA1
b16517f24626980d8cd17ee40e6f2f2c88eacdea

SHA256
9a84c4de924e3c7e322839fd26b03e8870bd93b2eab6f9c2137d187124450034

SHA512
81fb6b3df8c7c32cc7a4190532ff68d4daafb2eef9f9ac0c7901cd4db8c26c59ce8528984f878e8fa4d1a7ccc879f17fe3cee303c0ca003d8058a641dd274a22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
470461cfa20eb3f612c64c3dbf64deeb

SHA1
c4d2a184fb7f5d44e44e42db32ff1269ac0faf3d

SHA256
b9ad867826fe54aa15ed74d48785c03ce5fa2d04c4d2da4c81a7b5848e7328ea

SHA512
0a7adf055763e8dcd583551c7dbaeb690751fb9b2bbc74be7ea14af34f815ca880e94c7da8c107fced1ac5b07dedb8bae90058b417f0f43774f85505cfc6bccc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
a73eba1e9443c3fd4d1b3cbf1cb5ea55

SHA1
8e06dd5af4b99c721a19947074d8ec019e21adbb

SHA256
a41ec8a59575cac78b242292143c5a249f7b94f622cf092e57195311eca63a0d

SHA512
b9772f3510fa368f02718b3c9ef48da60ab4c21188c522e77b26e11e4fa4116de0f9f4e02cebe100f13749889c96c27651776d150808800899987069812f70f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
19b56933092c00c25eab99befbf96764

SHA1
71098979ae2a3c832f3b6a6cfd12cbba49685c73

SHA256
05e00a54ef24b304b0d85777da5f73218f74f841606aeeab39091897829d0b55

SHA512
66b4b407ad609cc5204e25e47bf0dee4a1c2678b786b8aa47a23bfc9b8be2081889752c5e81675f6810e0e8eba8dfbff4d4ff99ddbea2773f2b9b4259455f506

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
920eb04027e1453eec7d7c3ca675980f

SHA1
f8c9a5153f340a7b02d69b5d413a8196ecabf7fb

SHA256
12d2d61e92db5c1e00f63f25bff008d2ca99bc9f01ea2131d24e2d2ea1f74418

SHA512
d79d87566d6eda816ec0e9fd1ae1854eea324b34744f37fc851b318d6d572b6a1edcb92592b8d745ac75e2f94bdcb3304dbc71098e7a635e9f02c84900203d25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
a0a798735189e9d03e5c56dd9985cdb3

SHA1
55c2809840d64812e6152184221e3ebd1c5641fe

SHA256
353692c9328d1e1bf361a76a6d3ee16aa069e66ca350456cbc390fa8920f2ed0

SHA512
75a53f5d4e82c0047a325245f4106b97552e59c8c7b3aa5f01d2dac87847d1a19fef6ede491119af4f0dd61464604da9f2842508c54a9cd222a291b208e2106e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
10KB

MD5
ac424d68699c29e75ae9952666a463f3

SHA1
5b782632107246d7976b529a16a804d16bfe1c5b

SHA256
4179fc1d0f954cf621ae6589878e6114256ba45a4837dad9ac4f1ec776bcfa7e

SHA512
9a7c7b059e5f6706763a2dbcb853a562173fccb09e30c63cee8e5a22542a59d685b2ad8d64a11ad32b55f4ea532112b0edfc2ec49f2b48a77bdcab160828569e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
10KB

MD5
3876365e16e782738495b38bb31aad19

SHA1
f7aa4c5d84d22e842930afa04c1e8247fc701d97

SHA256
5f482e30a8129be1feef0d08dcb32c8440a8014286a807287c0b17477d075a8e

SHA512
3aab3b2280cf90df6a8cf387c732d8fcbeb37d4614b319d2376b54c7250ac7d1d316669de51534b5e9f9cb36cebfdffeede9dd62f2951ed1d45d14652aba08bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
5KB

MD5
fcf03ce84cba6da7e7470fc183da2e9f

SHA1
6dd6b5549d1eb010a084b1f5c5aebcd6f394aab5

SHA256
156b207bb18406d4a1aaa5d946c059f53c6b13cc292ea7318f73721d305bedd9

SHA512
a1a068a5d75e9656fff8bfce65950ba6576bc2bb8662fa7c66d51a6d5aac25f5962bab73399e6e93422debb6070d42ba27ade5d25d0c8e56de9c454282278695

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Filesize
10KB

MD5
b9a5b50a3273ae98b728f6198997fe46

SHA1
6a0b1fd6b4289e0342b5cf6bb7c9006b742b2d05

SHA256
4a6934e95e9ac7236e663539ee90f6652d9c32ad836e8e42dfad18cf2654ecc7

SHA512
1e125b052b29a9508fdb93899bc47ca246c0470385bde16fb3614a62ab44e04803330fd07708f241d2a96e379c56507ea537ba4cc209013704f344a11eb27dde

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5e04ef.TMP
Filesize
370B

MD5
d9e414776c74ce8bed17dba365be09f0

SHA1
06742c58962b99c2fdf135555a53c86f23bcd3b8

SHA256
5a77bc7ac2feb078d6e031c7d359935f02df0bd157b98c52be522b7b38c08d45

SHA512
0c71d169007e28be9f1b423ec3855d5ff59449a7994d42094b80f34182abde6ebfc87a7afae5feac3badb213393befcb978eb9acc3acb8cedb38970588689967

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c49397aa-3e16-4998-9d07-c9a2ef16ec11.tmp
Filesize
18KB

MD5
9c3b66bfed8391627bbaa6399f58d329

SHA1
a65eb42202e64d568eb696f1d3d14c21e9aa48d4

SHA256
2ddd2280fc973d1bdc05d1f05979838c5e32708e41c2082abc351cee9211f144

SHA512
e6d171ab55750832b89c09c00e72529d678bd774c011b841e1b9f5f1f9c44b355a458630a0bce63f6f7be9c18954cf60242622ae872413f6c3a7638dc4df4bcb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\MANIFEST-000001
Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
11KB

MD5
1fdff7f88de170e991782fce8e3f8605

SHA1
65649bb5f6bb3e838dc136dcc7ad180122bf1ed5

SHA256
8420cf8f6fe8d32ab3be4b576d6a3725a9fc8c791a18c4f1fb3776091995c737

SHA512
0b8c87514eba3cb3ec7408f14ff5f64a34d4d1d7d83ae8907431e6b28262a0d74efe04a7a6b4879c574f3f7cb57d4ebb5670830b878e819f866c48a2a2f7b4f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
b0dedef63846425a3d3df5d53e761129

SHA1
d9c1900f897ee245ad641eeb76f28160c365cbc3

SHA256
e50aa0c998a8d518f80a9be5c34c9aced2c6f3fc532e8e64f79347e112832497

SHA512
c8d0d469e509b0b6fc1be480cb3fcdbc9fb34d3996e74eaf356f277a07f5594315b37c457ffb486c856721f3c04b849dca863cf44c4ff751208cf667d00ab657

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
e6714283787810db37152d327b3687c2

SHA1
defcecee6ae5626ed1bb8b23d2cb587fb1b822e2

SHA256
43a8b3125e9a0ef811704f853ab3bf62c449e5477c8c70a8f5d2dcd723e3c29b

SHA512
adcdcb4bfccce58349ab9e064e368129e6a3ddeeb90f963b09b4876f7b04b70bc48c2f00b3a19d0e58f65f75cce2cde7fe2bd7816b704bd85f94f306b186ae8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
cbce91a1c7cf62b8ba58767f840a25ad

SHA1
843b189ac9a9481a4c05c601289662a0351c56a9

SHA256
1b80d32a28eba304ee92a7663f86a5d4bca70813eed45742b200c60d8f4b4260

SHA512
1b23dfc8b3058f472144c261fb81a8d6a2bd82635f7b5b077d9c7056c90c39758f96bda96a960edb9a26107c22ede940cc63292a441f6aba37c55c4558f00f8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
a5adfc3a1bda53329877e9abcd34603a

SHA1
e5fb3d410aa731f457a562111a6a8952d7b7250e

SHA256
6a035b9a4e68dcb95f5fc5d5cf1b848fc68e13995ed9c022544f273ede10a7c0

SHA512
93017148383ea53d2659191fd0276773ae5758064bc8a18119f93351584cbe8e8368c250f076278cd8c2f148e8379cc26f59c911a70e404551385a2b7e5364d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
a7e93db34ba0a71fbb9c4451b168de59

SHA1
b261a1d2bc924aa3047f8d67581affd42600281d

SHA256
84f4c15f155c7b5ff621496d2e3cd199bc6a3319aa61633d340631bdf8d25482

SHA512
80b92c344a6eefa628f047d5e1da8f5203205df65976538031058acd6e49dc8425118664ce398b0f868e29ad80bb54d0a0812d4fd64b4dae461b0888418971ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
f7ca9342f7d7a6c1d9bbc913f08866e6

SHA1
7634b5694b37b08fc5c8778b23a202b4d605c83f

SHA256
b90371e537b6dfc8e47300ff58c6c26316f4934459aad8f0bf73a7f1c972dd56

SHA512
ec6f1988e47665970747654fe9118196f71b4e24b62115ee05cc55c1dd7cfeffdb19ad5a93ca566e7af33911706e8ee1ca33f25a53d31b9f03b5ca9fe0c755eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
9KB

MD5
44800e0bc1581270f043aa3f72294105

SHA1
aec7c3e20a92295aca838ceca837debd01b4d26e

SHA256
63b8ffc69a0c8ffac66245efc150b3e36c4dd075001aab28476469bfad906173

SHA512
d2ca0e550df8d45c59c33632c31c4255dae3bf58c10cd698aa2c13d8f2d4a713807d3072e3f6c2442555aaf5a7c345285864e404a0c35762ededb765ae671609

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
7a0e2b3b6611991460942c70acdc8434

SHA1
cf2bb4070c1a72f301edb0d360c3c062354aaa1e

SHA256
2cacf56267dbebe56b84ca1bac8ee98dec3c81d223eab28515b66a84fcd2c129

SHA512
2747b5e4865a072e0f01a39665dd705b215abf3b2836be348a1e2764b6d024d65542bc8cc3da94e9a725d546de2494e4559a17ffc9e6c712229e42fc9635ff42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
0e432a9c64d83d4c987709f929f05755

SHA1
a5e0ddbc4b27d1b3786e299b2e9ba6d188cd3bf6

SHA256
343d0fef3b74cf5e33d4f4117f119a55e145259e91a2d1949cea57b7be5f4b02

SHA512
0ad8a2176e24a17f36d9a0bab1a348d92ac6befee8c11668b6bda0d7b56bde26b979c9e63f712e91a236301975558d9fb443c1462907483684b76fda3e1d64fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
93a0ac809f0f531ea71ca5e795c92fa8

SHA1
c21b849743cbbc63f52484179bd4554c9680e2bf

SHA256
2e948fcd5687f0cc3998f96420598ee64391c47801d625f120f818bda42501cb

SHA512
06b8cfd431be4d58b8f42e5d67f8971fce725abe8783f795a9ed29f895fb64c541a1ea3aa0ecb3fe4715d64e37a22ba049e0287c9b1d2f7229221e428dc79be0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
3eb22752b20d081ee266e1953fef0405

SHA1
51a188d1e327f94b572c7ed7d32aa40a146431b1

SHA256
666f20f15db1d0855141253663746ba8540c2b2db805d2cbebf6613415771418

SHA512
e5f80be565b38c5133f1d7daa231c629d6e8ff0cfaf1ecbc8f4076bdf7f8a86e794fbc8194908514ab38408491f7083f06ea4725a31e0cb88ac1277ea828cdda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
52d0d53b88563dbae332ecf5ae2ef897

SHA1
a13931f0bd2b864645f340f6e022d36f1d5e3384

SHA256
6ba0d42dd1047f5ce18244caaac278e8bc9c594aa2df2fc4c80925e286c58534

SHA512
63aa536e991e312f8fd3f439f320678fc0c376c36a95d069d73c1824eebb9fbe8655a4a3aab2ae0f1d2cf66dd305f21d689cc56d9d7c48da6f12d4990e782665

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
78e8e5de025360501dafcd76a2b5aaa2

SHA1
82a0b11c24d1b3b9fa310755c0fb63d1a7231ce3

SHA256
07ae7bfe332827fb2dce9ad529aecc578ce86b3d25bb5696a9eaee21117d0852

SHA512
2e3fcb7dd0745c9cccdcce8954c24bcdff54cf41116f048d6a149c39b889fedb3e4d50f885cb2c91c52d9d6319d8df85ec774d219daca077227514484544269c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
267e30b6099a560c498b1fb6fc441587

SHA1
81b2ec495c9c79ff84895a14f63f8c8a5cda891b

SHA256
51e002f5fece744dbfe3939e170e45b221c9b67f978b0cff9f3e2a6475913ed2

SHA512
46fbd059b466664a62def7f86e7d475f8526735cbba6f10baf46db60efdd8d5ad94526c81cb0c749834fb98049b49bed141e0f6667b4ff98da5cfda1efa211b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
0aec5ad87d0c1716225b63430dfe5398

SHA1
b9bd0954c77ffab7398aaefebeccc505bc34516e

SHA256
4ffbac5d20bec45face853535aa924a31c8695f01c440d7e0d7348b2df662841

SHA512
05957323a28c854e08b29fe4b8bc8ff03bf7093a8d278e36f173c1f9a4ff61f77c13614f8b4fb539cc7f68514a86cf7afd5f35ffc08167af5a0febafc8e5844a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
f068653011a6c5531ed1a2bbd47acd78

SHA1
1d4640fceebacde8afc42aedb55ca14bcef47c14

SHA256
e54d4994daef254f9e5905f76a16b96d16641293cd5c24a6b560515fb3197c6e

SHA512
967b5cd3efb2205698f66fc58ddd64cb057c7ec37f2b4834b03bec594ccac7c7c934ddb09a00f45865e8fdd66d7dcfb7aac20ddd5d00e9af37868048f3d0918b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
9a85c4f7129ab0aa3ab9ad0370bca640

SHA1
1e8571e3fc7dfe8f5de66ac8c15ab5f1723c1ddc

SHA256
26f9c0052fe4387ff00bdcdc9e9d078bb408b09a505b2e0993a5bfba9faa08f4

SHA512
1c7d9ac7a74f7a963ebc2a3f2c68a88b0373c532e540bc7ef161a503428ee520caff83bdf32b2fbcd535cb076cd818575f22bb225a1feba84bb3d308275210c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
86ff7ebea8e40414bda77227d79fd3a8

SHA1
a2bb427c83c8dcae0f18bee485055d333128777f

SHA256
fe96ab2b57ced19bd4ed07935bda47a90efefdb95e20f5caae5d80412c3d978f

SHA512
cb0dc74ee812bb67a20b2a8b9b1828b05832a2019b0a41a19cf82b2a9c6364a20b3dec3e0a02fe3b3f0844d0ba5df64a22067f86bba2a38c1964c51877183f66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
ee05358c5dedf2f841487e9d4191c697

SHA1
0a9ed514b3e25bb143b7da8522eb5cccd0ce1d4b

SHA256
17ce53cfd17c3d669ab6f8991dff1f607aac2729b01f19f1badca379cba9dac2

SHA512
3b808e63e85481a8b90df00ab03c9477127ec6bd6c3bd16fc2028726b992538180cbcf78c25ffe6467d1d826d062602bd2d67ffbc750cfc77112dfa2686e70ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
1a395b70c065e07d0d569c7ab8b07f60

SHA1
82c9707dfe8ccb18b63f959eef267b216fb02730

SHA256
2ce2eabcdc04169d1731595362137e9a4f02a370e7ed88a36f939f108d3480e3

SHA512
246e81c0ba7067cb7e353eb83aa2ee18957d061735dae8cd649c54a5a44c1df0e3cf5f37ed3dba32d14aef0095dffebdcac895014a0aea87df6fcb3313512fda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
13KB

MD5
bcc691245c1574c1d9a19ba77e665552

SHA1
5a7dbfe7f4c61c5f79774ad3ea9fa8f5157a422d

SHA256
8bdfe0167e1057b4f12029c9ce6471c53dbbae750f27d7ab6d5fb5f2f87d1b22

SHA512
5f75de146dc17dc213704ace297185ababdbabf243b5528ee7dcde41b32c6cc25aaea79343385da61bb23480cdbbe83b9e777d8edbb895ef5034bd344656a2a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1
Filesize
264KB

MD5
a750c9fb50a8b2fd7652da88eddc1185

SHA1
4df605331e7821133cd65583b36aaccd950ae1d6

SHA256
30eccf9dc1d49205a281258d603f26072913cc7c4d7a9ef98e81584a4ae7543c

SHA512
daf3cd19cc6702e187526e65d13899b257c1f0500585211b66016927f0ebac138521b226735c64fce635a10c87ccb0fad9b4eea5110983368a2f303619b54252

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db
Filesize
24B

MD5
2dd3f3c33e7100ec0d4dbbca9774b044

SHA1
b254d47f2b9769f13b033cae2b0571d68d42e5eb

SHA256
5a00cc998e0d0285b729964afd20618cbaecfa7791fecdb843b535491a83ae21

SHA512
c719d8c54a3a749a41b8fc430405db7fcde829c150f27c89015793ca06018ad9d6833f20ab7e0cfda99e16322b52a19c080e8c618f996fc8923488819e6e14bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db
Filesize
1024KB

MD5
f6c17093e194e36945ffa1555f680e9b

SHA1
57f2995c2ae8bbc449ae0d73cc66f393fb69a3f6

SHA256
50c30c51bf68c047ac1c9224f3cc8d076ff4838d315b6f38c4b98f9a3858154b

SHA512
0401b49ee7f1554f2c0c041806f1432982f4b618ef5f78213cd3790462928aad715cc0595e4ddcfababf3192002988ff32d1adb45f4d69ae7e613cb68d5cdd7a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db
Filesize
1024KB

MD5
b248923730b54a41a75fd2027952b8e6

SHA1
35ec80bc551469a5efa5ceb314997948fc7a9fc5

SHA256
0dc1dd02a41bee47441c672272130a17d0b97d1f1ba7ce6d785b663ea4ec1a83

SHA512
151e88de286541ece894e930258ac7e2c8cc8c596c38f1461a86c1cb99df477da37becf695c64fd3c4244a8cb6d9167d48d7e3c80d8206407996931092d596f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db
Filesize
24B

MD5
635e15cb045ff4cf0e6a31c827225767

SHA1
f1eaaa628678441481309261fabc9d155c0dd6cb

SHA256
67219e5ad98a31e8fa8593323cd2024c1ca54d65985d895e8830ae356c7bdf1d

SHA512
81172ae72153b24391c19556982a316e16e638f5322b11569d76b28e154250d0d2f31e83e9e832180e34add0d63b24d36dd8a0cee80e8b46d96639bff811fa58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db
Filesize
1024KB

MD5
58f2aa05bae5e8cc91f01c093d903e71

SHA1
339f85181ea6ec14715f49fdb572e4f5876cfaa6

SHA256
76f893c0e4b8f886a37833dfd7b76500e5383d3695d0f996aff5dafa6cc8c966

SHA512
e30594ffa871c947c4558a6e54f2ef1e00e18346fe64761a12aa98079e164176d0b007bb6b49a1a3b0cad9750baebc5fd0b3dd8a4f455e0850ba70af2813a336

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db
Filesize
24B

MD5
2d84ad5cfdf57bd4e3656bcfd9a864ea

SHA1
b7b82e72891e16d837a54f94960f9b3c83dc5552

SHA256
d241584a3fd4a91976fafd5ec427e88f6e60998954dec39e388af88316af3552

SHA512
0d9bc1ee51a4fb91b24e37f85afbf88376c88345483d686c6cff84066544287c98534aa701d7d4d52e53f10a3bea73ee8bc38d18425fde6d66352f8b76c0cbb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db
Filesize
1024KB

MD5
a3c8fa5a3c2a8fbdc0226cebf99570be

SHA1
4a47b8f023a253a0bac9e7a4e89d327f58638cde

SHA256
262706b1ed584936c457ad9ac509ef3c24e73257749b7224fa70210f913c2ec9

SHA512
318c1b24f230f445aaabe2c2d6d437971ae340dea39ce23255b8e2d69aaa95a01b59ab7969fb618bf7789eac5a27a4d73fe5f7ecb99a4a97642d3a224a7cf405

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db
Filesize
1024KB

MD5
5eb3e5dbf302f1eec4fa7e9f22ed52ad

SHA1
55422110cf288aea0889b160967a05d397ae188c

SHA256
48eb74c162842f196cdbe4be75dd8a878f44effc1dcabb6fb7419138ce5dcd61

SHA512
df8425d1cb8c1f102a8dcd7dad4d9a906555313a1e25f867859606c3ee20ca3464e8b5f093b66af8159311da9806a3f12790a22c8e0b4f72488dbb4913ee0603

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db
Filesize
24B

MD5
d192f7c343602d02e3e020807707006e

SHA1
82259c6cb5b1f31cc2079a083bc93c726bfc4fbf

SHA256
bb4d233c90bdbee6ef83e40bff1149ea884efa790b3bef496164df6f90297c48

SHA512
aec90cf52646b5b0ef00ceb2a8d739befe456d08551c031e8dec6e1f549a6535c1870adb62eec0a292787ae6a7876388dd1b2c884cba8cc6e2d7993790102f43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db
Filesize
24B

MD5
2a8875d2af46255db8324aad9687d0b7

SHA1
7a066fa7b69fb5450c26a1718b79ad27a9021ca9

SHA256
54097cccae0cfce5608466ba5a5ca2a3dfeac536964eec532540f3b837f5a7c7

SHA512
2c39f05a4dffd30800bb7fbb3ff2018cf4cc96398460b7492f05ce6afd59079fd6e3eb7c4f8384a35a954a22b4934c162a38534ad76cfb2fd772bcf10e211f7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db
Filesize
24B

MD5
f732bf1006b6529cffba2b9f50c4b07f

SHA1
d3e8d4af812bbc4f4013c53c4ffab992d1d714e3

SHA256
77739084a27cb320f208ac1927d3d9c3cac42748dbdf6229684ef18352d95067

SHA512
064d56217aeb2980a3bfaa1e252404613624d600c3a08b5cf0adcb259596a1c60ee903fdc2650972785e5ae9b7b51890ded01ec4da7b4de94ebda08aeaf662df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db
Filesize
24B

MD5
fc94fe7bd3975e75cefad79f5908f7b3

SHA1
78e7da8d08e8898e956521d3b1babbf6524e1dca

SHA256
ee1ed3b49720b22d5fda63d3c46d62a96ca8838c76ab2d2f580b1e7745521aa5

SHA512
4ceaf9021b30734f4ce8b4d4a057539472e68c0add199cf9c3d1c1c95320da3884caf46943fc9f7281607ab7fa6476027860ebed8bbaa9c44b3f4056b5e074d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
Filesize
7KB

MD5
7874a58a58325710783821486b54e0da

SHA1
1e860632a9fde2731905a2d33d94727f3fa9fd56

SHA256
310ef5cfac2cfe752984604545a7a610aee2ce8e193ff96e07c22e627cd3b1cf

SHA512
2a587f16686415c8d2dc72a89df4010b9cba717b9363eb0b4221fc20b508e0129c0c3297062fe21210c3058e9b37b3e45149294ae0ffc678f09845b70c304dc3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
Filesize
7KB

MD5
7874a58a58325710783821486b54e0da

SHA1
1e860632a9fde2731905a2d33d94727f3fa9fd56

SHA256
310ef5cfac2cfe752984604545a7a610aee2ce8e193ff96e07c22e627cd3b1cf

SHA512
2a587f16686415c8d2dc72a89df4010b9cba717b9363eb0b4221fc20b508e0129c0c3297062fe21210c3058e9b37b3e45149294ae0ffc678f09845b70c304dc3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
Filesize
7KB

MD5
4f2729f22b676897c0f581e2799a5f51

SHA1
8a36ff7b445cfe74d6d4cb9b6bab780c2ab8f9a3

SHA256
d5e2ccc93bfaa89f7ec1cf8641a62fca7b49c838acccb5f411c316adca56eea8

SHA512
38f688209f665acba27860077a114bea37a73d450967ceb706f75d1b2dd581db87e8deae6cd507509aab6f28d98f773dc93f553c2727208d98c981b3096fb8f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db
Filesize
7KB

MD5
9a81bd90a24fe95051c356f7c732d35d

SHA1
8a0eba0d55ab2f99aed7ce8eb47bc0cc2913ab60

SHA256
635c6796c1191594c923c3cba1643457008cd5fa41bcd0cd70686f68f0d56306

SHA512
e8eb2de266de3792cb2211eb1e57ac040a1586ac9c7ce9a24e55f6bd3d97a4915fbfd6a7fd9ec2281373d94c38527dbc203389639bdeef9e8939d8f714331550

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db
Filesize
24B

MD5
379523b9f5d5b954e719b664846dbf8f

SHA1
930823ec80b85edd22baf555cad21cdf48f066aa

SHA256
3c9002caedf0c007134a7e632c72588945a4892b6d7ad3977224a6a5a7457bf4

SHA512
eca44de86bbc3309fa6eab400154d123dcd97dc1db79554ce58ce2426854197e2365f5eee42bac6e6e9455561b206f592e159ef82faf229212864894e6021e98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db
Filesize
24B

MD5
5f243bf7cc0a348b6d31460a91173e71

SHA1
5696b34625f027ec01765fc2be49efcfd882bf8e

SHA256
1b1aed169f2acfae4cf230701bda91229cb582ff2ce29a413c5b8fe3b890d289

SHA512
9e08dfbbf20668b86df696a0d5969e04e6ee4a67e997ff392099bc7ff184b1b8965502215744be7fe423668b69099242bba54df3f0bfe4e70acdc7cad8195b02

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db
Filesize
24B

MD5
db7c049e5e4e336d76d5a744c28c54c8

SHA1
a4db9c8586b9e4fa24416eb0d00f06a9ebd16b02

SHA256
e8830e7ac4088cf3dd464caec33a0035d966a7de5ae4efc3580d59a41916ff7b

SHA512
b614037fb1c7d19d704bf15f355672114d25080223e7ee4424ad2cb7b89782219e7877b373bbc7fa44f3ad8df8a27eef4e8ccc765d44ec02a61e3b7fae88ae69

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Filesize
1KB

MD5
a6eb3038b46744f4cf56d69b53dae4ec

SHA1
c79bcb5918f4556bb703c2e88f3a9030c1088fbd

SHA256
0e54cbe960e1fad86ac7f1600bce5d693a7f34e417ff3d307e0bd7120ae24521

SHA512
810e50282c681419fa1575842f2decd7bcfd440ff95fb1174212a1a46e488b785601f0e805f7c2fe242f03c1456b7a3ec7cf59048399eced52eec07ca5b5405b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Filesize
1KB

MD5
5762b3963530597be647f0957e3cf829

SHA1
70171ea77f5f1fd2c306516fc30a3cfc57eef026

SHA256
93691aee95c4d6369e930f13e0f46d50453beb1016d6cf4f126fff0a38e57693

SHA512
75ee7266d10300fdec3ccfc2bc6a98e468a5d41bf94fadfb53f53a3a3053f122537882861f0aa73ebfe1c78a4ee4676b886f014f0d0df480a75ed058d34196c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Filesize
1KB

MD5
4453e6ff50aa080e0d622c158327d42c

SHA1
934e780f60ba533f50489b42869d3865418a8389

SHA256
cf49cfedbfb609f0a7c539804f165f751997fecf2a801dd78dc40c9de1a5e2b1

SHA512
013728072af2509a576e1fa657a00bc9c298ee0e01e6aee58537a9a8b1921b85210ece60d0a5347ed1b00fdbcfe8a0042a28e04a37806f9b83bc59a537f633e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Filesize
1KB

MD5
e338d95c4fcecaaef02dd7637aea75cf

SHA1
ccac2eb6ea02d13c217923090e781fab8025ef61

SHA256
433aa4d35a8403e83c5beeebc28f98485b2f79cb5dcdd2a1642a80b4d280c5b7

SHA512
17e37f6b80c46dbabee613296ce36c9789ec8d6143b9ac652236d60f639d94e2bbae6dac88ecbf218eb2475a58afb24711092fdf2c672c355f77d968ddddfb0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Filesize
1KB

MD5
5d1c1fa6b1becd46e90d4eaee52d53d7

SHA1
3cc10b27f3c1c39cb5ed50649d39f30668dad52a

SHA256
035a67f04e442d8f09df4095a603ed55e23cc2896152085b05013810b2e0ef28

SHA512
53038ee8fe9ded59967a9b97d5cda9ab514568e027aaaf7383433ad9a259dd9be6a406c639b93a59338b6d87f4e9657c459e8fa0f54923db089a1895d1d586de

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_lyu1w2xf.erd.ps1
Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize
9KB

MD5
3e7f6c7f151698768d856bed610a97f1

SHA1
64f5c790513b54d4cc0cd0f0903dee41c00d0ef9

SHA256
0dd73ca796e11430fdbb06a2ff5a0b783ac3b0f8439318f2c9ecee03319f5c1b

SHA512
e5168969e8e7abed5bda6d3004539bf340c6917bb9e2f000dc3a96aeed80243c6096c954db2e22ded62fb6156c6d3591d5f84a9ef9df45b55aee3b2399532c8e

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize
10KB

MD5
7b4d901042b78ddba7701f8fc9843c15

SHA1
7afe9972d7bcc282cf4b46c6715b8ca9f3b9aec4

SHA256
a273b2d0209a19f99daf1e54646c742e981efafa5fbf3d70e860aa84995664a2

SHA512
097cd8a0a96ce1e68fa3fcab94b5c616cfd5d167ffd39a4a493c26f17a178b2898c8b02f6b40e30417209a4946b1b92c51410e5bbc31ff73192e164e6899ab67

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Filesize
8KB

MD5
51ac0ea674d0ac9c8fbff6ad28682415

SHA1
525f4f0cdd85c3262fe7710ae417aa3ef1419abd

SHA256
3cfc5cd5cb8b3ff6f321354da18ca38c66a1c3c1b97d1ca2c7ff1d01ae1a05d2

SHA512
724c6e3042094c833fec7872b092f1879ff5ab1e440bdd6cb19849001f88d916e60a120f3c451c96f525f3ef8b184068f45f3201652f362841869e8b04679b73

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Filesize
3KB

MD5
c05246872ce7305cf4feb666b309ee67

SHA1
1b852146aa5c1196635dbd8033d68faccfb8b972

SHA256
714e93972f2e2eafadb6b643a2753840c47daa596a3cd31bfb232e3cf8fbc9bc

SHA512
3073be20fbf7428558f770d3b660f31103ee617f908073c61d4499c1e260cdc5cc4683676e85cecc4d8352565987da1be89c01a5b5ec2ec0b4cbe0a0d6d6b3bb

Download Submit
C:\Users\Admin\Downloads\Activation.exe
Filesize
703KB

MD5
8c1d40db6464fd098716a317486db961

SHA1
4b4d82e0a91f11e1348488b9e9edd43697d9db67

SHA256
7b9723c3ca58ecdde9af2dd2215e00fa7c7692e960242d9c6b2e80ab45fc90d5

SHA512
16c868e227c4928dfcc116ba6e9d93c22418936cad625cd48645abb96229d31ee1329105097d2e7f36f6382e214dfd54e1eb92842bcc45edd978f64da6c4c6dd

Download Submit
C:\Users\Admin\Downloads\Activation.exe
Filesize
703KB

MD5
8c1d40db6464fd098716a317486db961

SHA1
4b4d82e0a91f11e1348488b9e9edd43697d9db67

SHA256
7b9723c3ca58ecdde9af2dd2215e00fa7c7692e960242d9c6b2e80ab45fc90d5

SHA512
16c868e227c4928dfcc116ba6e9d93c22418936cad625cd48645abb96229d31ee1329105097d2e7f36f6382e214dfd54e1eb92842bcc45edd978f64da6c4c6dd

Download Submit
C:\Users\Admin\Downloads\Activation.exe
Filesize
703KB

MD5
8c1d40db6464fd098716a317486db961

SHA1
4b4d82e0a91f11e1348488b9e9edd43697d9db67

SHA256
7b9723c3ca58ecdde9af2dd2215e00fa7c7692e960242d9c6b2e80ab45fc90d5

SHA512
16c868e227c4928dfcc116ba6e9d93c22418936cad625cd48645abb96229d31ee1329105097d2e7f36f6382e214dfd54e1eb92842bcc45edd978f64da6c4c6dd

Download Submit
C:\Windows\IME\activator.bat
Filesize
3KB

MD5
365b88395524dec0af52387ed73317ce

SHA1
66a6e96fb198e8749c9086e35b2b2f85aa21c63c

SHA256
99ada36422b17257eba9d9cc5d123907589f638aa9564bc8fb000261cc9c1c10

SHA512
46efce6af2a90ace25842fd0d85212463c3b6ba2a6f8e089ee29381d960a745a278b86b49bf3330d686b140e3fc66c9cc8ac70df7f05d8e0ecac694dc542cff5

Download Submit
C:\Windows\IME\permissions.bat
Filesize
162B

MD5
4be7ca8b30ea192628228857b5005655

SHA1
588a60df54f8ff2924b2fd569dfc39ce5ae17cfd

SHA256
5e56203e437e3a219fcc9f295c8bcf31961585de816212ce0a6a306a465bc853

SHA512
169b735f5b72ff12910451cf9fbab231b0d9e8b9481f9e01824e5c85075caf17283bb4a54353a9c5958c5ff7eebc6dc932630c1e824be5ebe416bc608306c7b4

Download Submit
C:\Windows\IME\reset.bat
Filesize
325B

MD5
939378e1c9e25f424c618a379e61fc48

SHA1
45822124d56b6e6efcfbaab246feff695b7098d4

SHA256
fd805584b817ad0b320c85653a5bd7342650359feae60e5a3e722d5571542146

SHA512
3833f14692f5cdfea285654f91ac814a89bf189a4db99b0fc1e817905d9929f6f4b184db5a51269f9b82170a14af2c5e0510150201cea03177cab04fb26494fb

Download Submit
C:\note.txt
Filesize
218B

MD5
afa6955439b8d516721231029fb9ca1b

SHA1
087a043cc123c0c0df2ffadcf8e71e3ac86bbae9

SHA256
8e9f20f6864c66576536c0b866c6ffdcf11397db67fe120e972e244c3c022270

SHA512
5da21a31fbc4e8250dffed30f66b896bdf007ac91948140334fe36a3f010e1bac3e70a07e9f3eb9da8633189091fd5cadcabbaacd3e01da0fe7ae28a11b3dddf

Download Submit
\??\pipe\LOCAL\crashpad_4908_CKBNUJMEUWYESTVZ
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
\??\pipe\crashpad_984_ZUIHSSNCWJCAVCDI
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/3376-451-0x000001D7D0120000-0x000001D7D0130000-memory.dmp

Filesize
64KB

Download
memory/3376-409-0x000001D7D0120000-0x000001D7D0130000-memory.dmp

Filesize
64KB

Download
memory/3376-410-0x000001D7D0120000-0x000001D7D0130000-memory.dmp

Filesize
64KB

Download
memory/3376-449-0x000001D7D0120000-0x000001D7D0130000-memory.dmp

Filesize
64KB

Download
memory/3376-450-0x000001D7D0120000-0x000001D7D0130000-memory.dmp

Filesize
64KB

Download
memory/4732-644-0x0000018D65A30000-0x0000018D65A40000-memory.dmp

Filesize
64KB

Download
memory/4732-642-0x0000018D65A30000-0x0000018D65A40000-memory.dmp

Filesize
64KB

Download
memory/4732-643-0x0000018D65A30000-0x0000018D65A40000-memory.dmp

Filesize
64KB

Download
memory/5516-343-0x000001A137390000-0x000001A1373B2000-memory.dmp

Filesize
136KB

Download
memory/5516-354-0x000001A137380000-0x000001A137390000-memory.dmp

Filesize
64KB

Download
memory/5516-353-0x000001A137380000-0x000001A137390000-memory.dmp

Filesize
64KB

Download
memory/5984-397-0x00000241C3DD0000-0x00000241C3DE0000-memory.dmp

Filesize
64KB

Download
memory/5984-396-0x00000241C3DD0000-0x00000241C3DE0000-memory.dmp

Filesize
64KB

Download
memory/5984-395-0x00000241C3DD0000-0x00000241C3DE0000-memory.dmp

Filesize
64KB

Download
memory/6020-383-0x000001E26D3C0000-0x000001E26D3D0000-memory.dmp

Filesize
64KB

Download
memory/6020-382-0x000001E26D3C0000-0x000001E26D3D0000-memory.dmp

Filesize
64KB

Download
memory/6020-381-0x000001E26D3C0000-0x000001E26D3D0000-memory.dmp

Filesize
64KB

Download
memory/6640-3655-0x0000000006E80000-0x0000000006E81000-memory.dmp

Filesize
4KB

Download
memory/6640-3654-0x0000000006E80000-0x0000000006E81000-memory.dmp

Filesize
4KB

Download
memory/6640-3651-0x0000000006E80000-0x0000000006E81000-memory.dmp

Filesize
4KB

Download
memory/6640-3653-0x0000000006E80000-0x0000000006E81000-memory.dmp

Filesize
4KB

Download
memory/6640-3649-0x0000000006E80000-0x0000000006E81000-memory.dmp

Filesize
4KB

Download
memory/6640-3645-0x0000000006E80000-0x0000000006E81000-memory.dmp

Filesize
4KB

Download
memory/6640-3644-0x0000000006E80000-0x0000000006E81000-memory.dmp

Filesize
4KB

Download
memory/6640-3650-0x0000000006E80000-0x0000000006E81000-memory.dmp

Filesize
4KB

Download
memory/6640-3643-0x0000000006E80000-0x0000000006E81000-memory.dmp

Filesize
4KB

Download
memory/6640-3652-0x0000000006E80000-0x0000000006E81000-memory.dmp

Filesize
4KB

Download